> And mine: if something needs an authorized user, and $user var is not > set: please log in (with 403 message, or a simple form). Evaluate, then > set $user session variable. If I check that the variable is in the > PHP_SESSION_VARS[], then I think it is a quite safe method to log in the > user. Correct me if it is not...
Well, I thought about session when I finished that. So You may log in , and log out. While logout , new cookie is sent , and while logon system fetch user topic and sends its cookie. If You are not logged and want to edit anything, then &(midgard.uri); is sent in url so You log in and then Location is changed where You haven't been logged. That's way user do not have to remember what he wanted to do after login. :) Piotras --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
