Not sure of what I'm saying, though: wouldn't that "prevent" from making mistakes?
I mean: I don't know where $_SESSION['openid'] is set, but if it is checked before than $_POST, and you at the first try POST a wrong identifier, the wrong one would be saved in session and then it would be impossible to go on? (I just read these two lines, so I don't really know how the flow works... :blush: )