[geeklog-devel] Circular group references

[Dirk Haun]

Here's an interesting case I had:

Someone wasn't able to log into his site any more. Geeklog went from
index.php to users.php and then seemed to sit there forever.

As it turned out, he had set up a circular group reference, i.e. group A
was assigned to group B and group B to group A. So when someone who was
in one of those groups tried to log in, Geeklog went into an endless loop.

The funny thing is that using Vincent's speed improvements in lib-
security.php enables you to log into such a site nonetheless. So
replacing lib-security.php with the version from CVS is one way to
resolve these problems.

However, Geeklog shouldn't let you set up such dependencies in the first
place. Avoiding that, though, seems to be an interesting challenge ...
Any takers?

bye, Dirk


-- 
http://www.haun-online.de/
http://mypod.de/