Auth
pear.php.net
1.3.0r4
beta
PHP License
mj
Creating an authentication system.
The PEAR::Auth package provides methods for creating an authentication
system using PHP.
Currently it supports the following storage containers to read/write
the login data:
* All databases supported by the PEAR database layer
* All databases supported by the MDB database layer
* All databases supported by the MDB2 database layer
* Plaintext files
* LDAP servers
* POP3 servers
* IMAP servers
* vpopmail accounts
* RADIUS
* SAMBA password files
* SOAP
2006-02-14 15:59:40
This release fixes a security issue that allows an attacker to perform
injection attacks against the underlying storage containers. Upgrading
is strongly recommended if you are using beta releases of the Auth
package.
* Improved parameter validation in the DB and LPAP containers. (Patch
provided by Matthew Van Gundy.)
* Fixed Bug #3101: Wrong variable names in Auth/Container/File.php (mike)
* renamed supportsChallengeResponce() to supportsChallengeResponse()
in the DB container (quipo)
* Fixed Bug #4347: recognition of DB and MDB objects passed as dsn
* Fixed Bug #6324: updated MDB2 container
* Fixed Bug #5174: "Only variable references should be returned by reference"
bug in _factory()
* Fixed Bug #2446: english language typos.
This results in a BC break for any custom containers that have implemented
supportsChallengeResponce(). Also all containers already
supportsChallengeResponse() instead of supportsChallengeResponce() and
therefore the call in Auth_Frontend_Html always called the default
implementation and not the container implementation.
37230
http://pear.php.net/get/Auth-1.3.0r4