[geeklog-devel] Circular group references
geeklog at langfamily.ca
Sat May 17 11:35:18 EDT 2003
I'm probally stating the obvious and your really asking if I want to test
adding the code to:
When adding a new group we just check to see if the user is already a
member of that group?
Is this what you had in mind for a fix?
----- Original Message -----
From: "Dirk Haun" <dirk at haun-online.de>
To: <geeklog-devel at lists.geeklog.net>
Sent: Saturday, May 17, 2003 11:13 AM
Subject: [geeklog-devel] Circular group references
> Here's an interesting case I had:
> Someone wasn't able to log into his site any more. Geeklog went from
> index.php to users.php and then seemed to sit there forever.
> As it turned out, he had set up a circular group reference, i.e. group A
> was assigned to group B and group B to group A. So when someone who was
> in one of those groups tried to log in, Geeklog went into an endless loop.
> The funny thing is that using Vincent's speed improvements in lib-
> security.php enables you to log into such a site nonetheless. So
> replacing lib-security.php with the version from CVS is one way to
> resolve these problems.
> However, Geeklog shouldn't let you set up such dependencies in the first
> place. Avoiding that, though, seems to be an interesting challenge ...
> Any takers?
> bye, Dirk
> geeklog-devel mailing list
> geeklog-devel at lists.geeklog.net
More information about the geeklog-devel