[chora] Security Issues, Not a nice solution

Anil Madhavapeddy anil@recoil.org
Thu, 28 Jun 2001 16:36:40 +0100


> If you are (us I do) in a rush to get a working
> per module/group/user auth you can manage the following
> solution.

You could also hack chora/lib/base.php and add in HTTP auth capability
there.

Look for the:

$cvsrootopts = $cvsroots[$acts['rt']];

line, and add in whatever checks you want there using PHP.

> I will wait impatient for the SQL/sesion solution which I
> think is easier to mantain.

Its definitely the way to go ... either Chuck or I will add it in as
time permits - if you want to go ahead and try it yourself, feel free!

Anil