When i add a simple dynamic page, i tried to use the gloab is_logged_in=> sub { return $USER ? 1 : 0 }

if form of <%if is_logged_in%><%Username%><%endif%> but it doesn't work!!!<%Username%> returns an unknown tag.

Please help!

Can't you just do:

<%if Username%><%Username%><%endif%>

That works, but i recall Alex said in one post that using the global is more secure and prevent from cgi inputs!

Also when using the if Username tag, it doesn't detect if the user was logged in correctly, it's very conflicting.

I got the is_logged_in global to work right under the other links page except for the page builder generated page, so if help?

I don't know at the moment what the problem is, but try modifying you global to
Then, it should work. I'll try to find the cause of this problem.

Ivan
-----
Iyengar Yoga Resources / GT Plugins

Do you remember where Alex said that?

I don't see how using a global could be more secure than using a template variable. They work out to just about the same thing.

All the scripts that do something to the databases, check to make sure the user is logged in, BEFORE they go and do anything.

The GT (and well written 3rd party ones) use $USER->{Username} to decide what to do, and that variable is available only after a successful log on.

If you try to pass in Username=Hacker for example, you aren't going to get very far. You might trick a template into displaying something, but I don't even see how that can happen, since everything is still piped or run through scripts.


PUGDOG� Enterprises, Inc.

The best way to contact me is to NOT use Email.
Please leave a PM here.

You are completely right, there is not really a security problem here.

The only thing that is a bit odd is that if a user is not logged in, and they pass Username=hacker in the query string, then Username will be available as a template var, and it will be set to hacker. If the user is logged in, this is not a problem since the real username overwrites the one passed in through the query string.

Ivan
-----
Iyengar Yoga Resources / GT Plugins

I believe here ...

http://www.gossamer-threads.com/...i?post=196181#196181