PHP OpenID php problems

[Christian Weiske]

Jonathan,

(about PHP-openid-2.0.0-rc1.tar.gz)

The example README still tells nothing about setup.php and still advises
to modify config.php which simple does not exist.

setup.php has some more problems when E_NOTICE is enabled in php's
error_reporting: all the "store method" fields do have a text in them
since the variable is not defined:
> Notice: Undefined index:  fs_path in
> /data/html/cweiske/id.cweiske.de/server/setup.php on line 316

Perhaps this is intented, but there is no way to add users in setup.php
anymore.


After setup, running server.php:
> Notice: Constant login_needed_pat already defined in
> /data/html/cweiske/id.cweiske.de/server/lib/render/idpage.php
> on line 17
(the constant is already defined in login.php)


When doing my first login (clicking on the login button on the
server.php top), I reach the login page with following text:
> Enter your identity URL and password into this form
> to log in to this server. This server must be configured
> to accept your identity URL.
It's just that there is no password field.

Just typing in my username and clicking Login, I get:
> PHP OpenID Server — You are logged in as http://cweiske.de/
> (URL: http://id.bogo/server/server.php/idpage?user=http://cweiske.de/)

All the pages should have a no-cache tag set, since browsers will cache
the pages otherwise. This happened to me with an 1.22 example server,
showing me outdated pages when I already had been logged in.
So for once, a HTTP header should be sent, and the html should contain
in the head:
    <meta http-equiv="cache-control" content="no-cache"/>
    <meta http-equiv="pragma" content="no-cache"/>

Since the lib now supports xrds, the readme and the server start page
should also show the correct html header parts as shown in
http://www.openidenabled.com/openid/use-your-own-url-as-an-openid

Why is there no "trusted sites" feature in the server anymore

-- 
Regards/Mit freundlichen Grüßen
Christian Weiske

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: OpenPGP digital signature
Url : http://lists.openidenabled.com/pipermail/dev/attachments/20070406/5a4bbba0/attachment.pgp