> I do not whant my users to be able to logon to the midgard adminsites, 
> but logon to the different forums. How do I do that?

Be quiet about admin url :))
I do not know by now.
Create another SG only for keepeing users there?
Write some simple script for admin interface.?
<? 
$go_out = 3; // 
if ($person->group == 'go_out') exit; ?>

Things like that.

> My idea: If the user doesn't have a midgard account, store username and 
> pawd as preferences. But then, the passwords will not be encrypted.

So what? 
I use something like:

1. send cookie
2.create user
3. create user topic where name = cookie, with pass  plain text in some field

All is piece of cake:
1.check what cookie is
2. mgd_get_topic_by_name (id, cookie);
3. $user = $topic->creator;
4. Hello!  $user!!!
(stupid man , he thinks he is logged) ;)
5. bla bla user watch some
6. oh! user wants to add something
7. ok let's  mgd_auth_midgard($user->username$SG, $topic->field,0).
8. OK some changes made
9. unset user

I do not know if it is really good, but I think that is much secure
than keeping user login and pass on client hdd in cookie.
Beside You do auth only when it is needed.

Piotras








---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to