Login + session table question

[dRiFT]

Hi, I'm working on a modified login for a vB forum, this is to get it using the same login details that already exist for the web site (email addy + password as opposed to username and password).

All that side of things is working fine, the site members automatically get a forum account created when they join and the first time they login in they're asked to specify a forum display name(custom template) which it then validates against the usual vB name rules. However if you choose not to bother specifying a name when asked and try and visit the forum front page it's logged you in and you're given the name 'unregistered' as the field's blank in the db. This is where the problem lies as I don't want anyone being able to access any member stuff without giving that display name.

So onto the solution...

What I'm trying to track down is the point at which the users session info has their userid added to it, so that if the display name is blank I can stop this being done and therefore they appear to still be logged out, until they return and actually bother to enter a forum name. It's proving to be a bit tricky when you can't get the forum to output any debug values simply. Has anyone tackled this kind of problem before? As always I'm trying to achieve this with the minimum number of mods to the system.

[Marco van Herwaarden]

Easy solution would be not to allow an empty username. And for debugging simple echo statements work great.

[dRiFT]

I have to allow an empty username to begin with, as the login details are their email address and password(I have already modded this part), which ties in with the main site. The blank username is then used to distinguish between those who have specified a forum name and those who haven't (a lot of our site members will never bother to use their forum account, but they have one anyway).

Echo statements break the forum pages so you end up with just a blank page, I believe this is because of how the templating works. I'm working with vB 3.0.7 btw, should have really said this at the start.

[Marco van Herwaarden]

If placed on the right place (for example not before the global.php) echo statements will not break up your page.

Then assign them a fake username you can recognize, for example: Reg999999 Where 999999 is the userid. If they want to use the forum, they can change to a real name.

[dRiFT]

Sorry maybe I should be a bit more clear. The issue isn't the username, I can deal with that. All I'm trying to do is hunt down where in the login code their userid is being added to the session, which in turn makes them logged in. So until they do what they're told they're not going anywhere.

Solved...just needs testing.