From 12df6592f337083d9bb0f652851a11fba1310cfd Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Tue, 11 Jan 2011 11:36:35 +0300 Subject: add optional AUTO_LOGIN for when remote authentication is allowed (closes #295) --- functions.php | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) (limited to 'functions.php') diff --git a/functions.php b/functions.php index b2694f7ec..4184880fe 100644 --- a/functions.php +++ b/functions.php @@ -1991,9 +1991,15 @@ } if (!$_SESSION["uid"] || !validate_session($link)) { - render_login_form($link, $mobile); - //header("Location: login.php"); - exit; + if (defined('ALLOW_REMOTE_USER_AUTH') && ALLOW_REMOTE_USER_AUTH + && $_SERVER["REMOTE_USER"] && defined('AUTO_LOGIN') && AUTO_LOGIN) { + authenticate_user($link,$_SERVER['REMOTE_USER'],null); + $_SESSION["ref_schema_version"] = get_schema_version($link, true); + } else { + render_login_form($link, $mobile); + //header("Location: login.php"); + exit; + } } else { /* bump login timestamp */ db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " . -- cgit v1.2.3-54-g00ecf