Jørn Wildt
Dealing with Zikula and other interesting stuff
RFC - RSS feeds
-
- rank:
- 12
- registered:
- March 2009
- Status:
- offline
- last visit:
- Posts:
- 0
I'm thinking about implementing RSS feeds for Pagesetter, but run into some issues about access control. I looked into "backend.php" which is PN's RSS feeder. Apparently it does no access control checking at all - major security bug if I'm right!
Does anybody know a way to login using RSS feeds? Or would anonymous RSS feeds (with access control as if user was "anonymous") be enough? I suppose my self that anonymous would be good enough.
Comments?
-
- rank:
- 12
- registered:
- March 2009
- Status:
- offline
- last visit:
- Posts:
- 0
How about a "remote" group access that is configurable, defaulting to the same as anonymous? Therefore if anonymous is good enough, leave it alone. Otherwise, users could configure how much access the "remote" group got?
- halfelven
-
- rank:
- 12
- registered:
- March 2009
- Status:
- offline
- last visit:
- Posts:
- 0
The .8 version of the News modules does this using a theme.
The RSS feed should contain the items that are available to unregistered users (no special group); and there is a theme calles RSS091 that formats the items to ba a RSS feed.
Using your Smarty approach, this can be done maybe by providing additional templates (foobar_rss.tpl)?
J?rg
[Edited on 19/11/2003 by jn]