phpWebLog

Has Jason given up on the idea of User accounts and it's up to us to implement them? If so, I'm game.

Doesn't -seem- to difficult. (I'm assuming that that no one is expecting a slash type of configuration/ratings system.) Add another table (T_users) with user,pass,email, blah, blah, etc etc. Contrib.php checks a cookie for a user/pass combo and checks it against the db, if it doesnt exist, it shoots them to register.php so the person can input their data.

Please don't make a cookie that includes the
username or password. Have a random number or
string that is generated upon login and stored
in the database that you use in the cookie and
removed upon logout, which is random each time
(with maybe a definable expiry).

Having a user/pass combo in the cookie is a
horribly insecure way to have people muck around
with your user accounts.

Vincent has the idea, use an id that exists for the session, use cookies so it can work on both php3 & 4, check user pass etc against database, if ok, create an id that is passed to cookie and used until logout... also I have not seen Jason say he has given up on this, also registration should still be optional, ie sections of the site should be nominated as member only via some method.

Yeah, totally. I agree that registration should be optional. On some sites, if you need to register, you just lost 10-25% of the people who might write something anonymously or otherwise. Some people (like me) couldn't be bothered to register on a website just to write one message.

hmmm, my feeling is that it could be optional to register, but you would get some, i mean like a special configuration/webpage with special services, like user only - votepool, news, filemanager and stuff, what do you feel? jason c'mon, you're the phpweblog man an NO ONE can deny it, you can do it, please develop phpweblog more, it's a great script and it shouldn't be abandoned, that's my request, c'mon ppl help me convincing jason

Hi Vincent, Mr Bar & Big D,

Vincent I know I would be on your site a lot less if I had to register....I hate form's being forced on me, even if its a great site :)

Mr Bar, I do not think we have to convince Jason, I am sure he has enough to do and will do it if he feels he has the time & its worthwhile (which of course it is), what should happen is more people help in coding, I guess thats why Jason went to the trouble of creating a sourceforge acc. , I am not flaming you, but saying Jason probably does not want 20 or more wives naging him to do something that should be appreciated, I know that my contributions would not be very, well, complex, so I cannot help, but the person whom started this thread appears to be willing and probably able, so if jason is in fact not working on this, it would be worth somone else helping to develop such a thing.

Login checking is really not too hard, and I can point out some simple examples that could be hacked on, the part that would be difficult is adding to the existing code so that in the site config area or other you could specify pages that would be member only areas, maybe this is not that hard either.

So I would ask Jason what he has done so far on this, and if somone is too code it, ask jason for what format etc he may like it in so that he will also be able to know what is done (I am sure he already would have a method for doing this)

I just shudder at the thought of possibly nagging somone who is producing code for the general Public for what as far as I can see gets a rate of $0/hr.

BTW if this wants to be discussed more with me in particular, I prefer the mail list :)

G

Exactly. I'd want to make sure we arent stepping on Jason's feet by starting development on user accounts if he's already got something in mind or has started code for it.

Since jason hasn't got the time, etc, to impletment the user accounts thing, i supose there is no problem to do it on our own. I belive PHPWebLog is under GPL so we only need to give the necessary credits do jason and to his work, and carry on.

I don't know shit about php and stuff, but i will do everything to support who ever tries to implement the user accounts.

At this time i'm really needind the user accounts ... jason told us that he was going to make it but he didn't. I understand him, but ... he has some priorities, i have others. We can wait forever for a clean release, causa there willl allways exist bugs and stuff. I belive 0.5.0 it's a god starting point.