A3M - Account Authentication & Authorization Module

[eluser]Zishan[/eluser]
Great job Peng. Saved me a week of figuring out CodeIgniter and programming this very same stuff

btw, I'm on hostgator, had some trouble getting segment urls and query strings working together. I think I'm past that hump:

1. rewrite rule
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php?/$1 [L,QSA]
2. config.php
$config['uri_protocol'] = "REQUEST_URI";
$config['url_suffix'] = "/";

Current problem is failure to log in with google, myspace and aol. The google error response is:

Auth_OpenID_FailureResponse Object
(
[status] => failure
[endpoint] => Auth_OpenID_ServiceEndpoint Object
(
[EDIT] ...
)

[identity_url] =>
[message] => Invalid openid.mode '<No mode set>'
[contact] =>
[reference] =>
)

I tried following this: http://code.google.com/p/diso/issues/detail?id=136
and these directions: http://ioni2.com/2009/wordpress-openid-l...nd-drupal/

but the techie I got said he couldn't help without something that actually produced a 403 error. He supposedly whitelisted me for rule 340163, but I'm still getting the same problem.

Thoughts?

[EDIT]

Jfyi, that dump is of $response from sign_in_google.php controller, around line 94:
// Complete authentication process using server response
$response = $consumer->complete(site_url('account/sign_in_google/verify'));

However, access log shows openid.mode parameter is defined:
...&
openid.ns=http://specs.openid.net/auth/2.0&
openid.mode=id_res&
...

[EDIT2]

Hit up another hostgator techie. Was rule ID 340153 ("Generic PHP code injection protection via ARGS 3"), not 340163 ("Remote File Injection attempt in ARGS (MM)").