[geeklog-devel] Circular group references

Blaine Lang geeklog at langfamily.ca
Sat May 17 11:35:18 EDT 2003


I'm probally stating the obvious and your really asking if I want to test
adding the code to:
 When adding a new group we just check to see if the user is already a
member of that group?

Is this what you had in mind for a fix?

----- Original Message -----
From: "Dirk Haun" <dirk at haun-online.de>
To: <geeklog-devel at lists.geeklog.net>
Sent: Saturday, May 17, 2003 11:13 AM
Subject: [geeklog-devel] Circular group references

> Here's an interesting case I had:
> Someone wasn't able to log into his site any more. Geeklog went from
> index.php to users.php and then seemed to sit there forever.
> As it turned out, he had set up a circular group reference, i.e. group A
> was assigned to group B and group B to group A. So when someone who was
> in one of those groups tried to log in, Geeklog went into an endless loop.
> The funny thing is that using Vincent's speed improvements in lib-
> security.php enables you to log into such a site nonetheless. So
> replacing lib-security.php with the version from CVS is one way to
> resolve these problems.
> However, Geeklog shouldn't let you set up such dependencies in the first
> place. Avoiding that, though, seems to be an interesting challenge ...
> Any takers?
> bye, Dirk
> --
> http://www.haun-online.de/
> http://mypod.de/
> _______________________________________________
> geeklog-devel mailing list
> geeklog-devel at lists.geeklog.net
> http://lists.geeklog.net/listinfo/geeklog-devel

More information about the geeklog-devel mailing list