OWASP/phpsec

need for isUserIdValid() in session library

Closed this issue · 5 comments

Paulo Guerreiro recently added functions to check validity of userID in auth library (user.php)
paulocmguerreiro@5c77aa9

We need to extend this capability to session library as well as it uses userId for all important tasks.

Since this is a static function it can be called directly, otherwise, this function needs to come out to a general class, i think!!?

but libraries need to be stand alone so we shall not use it from auth library

You dont need to check userID in session library or any other library because the ID's would come from the developer end. You dont have control over those.

Session and Auth are usually coupled, its hard to make them stand-alone.


Notice: This message is digitally signed, its source and integrity are verifiable.
If you mail client does not support S/MIME verification, it will display a file (smime.p7s), which includes the X.509 certificate and the signature body. Read more at Certified E-Mail with Comodo and Thunderbird in AbiusX.com

On Oct 25, 2013, at 9:26 AM, Rahul Chaudhary notifications@github.com wrote:

Closed #74.


Reply to this email directly or view it on GitHub.

only user library needs userID....rest of the libraries will work when they
are given a userID.
Auth is in user library...so it comes free with the user library.

Session is another library. It is stand alone.

All other libraries except "userManagement" are stand alone.

On Fri, Oct 25, 2013 at 10:00 AM, AbiusX notifications@github.com wrote:

Session and Auth are usually coupled, its hard to make them stand-alone.


Notice: This message is digitally signed, its source and integrity are
verifiable.
If you mail client does not support S/MIME verification, it will display a
file (smime.p7s), which includes the X.509 certificate and the signature
body. Read more at Certified E-Mail with Comodo and Thunderbird in
AbiusX.com

On Oct 25, 2013, at 9:26 AM, Rahul Chaudhary notifications@github.com
wrote:

Closed #74.


Reply to this email directly or view it on GitHub.


Reply to this email directly or view it on GitHubhttps://github.com//issues/74#issuecomment-27094735
.

Regards,
Rahul Chaudhary
Ph - 412-519-9634