
Login Auto Plugin
aka "The Plugin formerly know as Auto Login"
By Jay Guerette <JayGuerette@pobox.com>
v0.2 (c) 2001 (GNU GPL - see ../../COPYING)

Sorry for the name change, better now than later.... it won't happen again.
If you're updating from Auto Login, make sure you disable that plugin in the
SM config, and enable the new one. Sorry, again. Remove the old directory.

This software was ALPHA, lots of people downloaded it, and no one complained.
This software is now BETA.

This plugin saves the username and/or password by encrypted persistent cookie.

The encryption uses a random XOR technique, MD5, and a private key. It's
portable without relying on the MCRYPT library; it's also fairly strong. Take
a look at the code. It's nifty.

Once installed, you will need to edit/look at 'login_auto_config.php' in 
the 'login_auto' plugin directory. At the very least you should change the
encryption key.

Here's the one catch: I tried really hard to do a 'clean' implementation, 
but I just couldn't do it. So... you need to add 2 lines to login.php.

1. Add: do_hook('login_cookie'); above: echo "<HTML>";
2. Add: do_hook('login_form'); above: echo "</FORM>\n";

Why? Because I needed to handle cookies before the document starts, and 
because I needed to add something to the login form.

Perhaps someday these hooks will make their way into the real product?

A 'signout' will erase the cookies.

If you enable the security document link in the config file, and want to use
the included 'security.php' file, make sure you put it someplace accessible,
and update the url in the config file.

Please contact me with any questions or problems.


History

v0.1 (alpha)
initial public release

v0.2 (beta)
Changed name from auto_login to login_auto, because Tyler Akins scares me.
... Ok, actually, he had a good idea, and hey, it's beta, I can do that.
Can handle multiple encryption keys, as many as you want! Go paranoia!
Clears the cookies if the login fails, so you can login normally.
Forgets your username properly if you uncheck the remember username box.
