I’m aware of the risks of rolling your own user authentication scripts, but I’m also wary of using packages that don’t seem to be actively maintained: the current version of PEAR LiveUser is almost a year old.
Please recommend (and argue the case for) an actively-maintained user-authentication library which can be integrated into an existing web project. It should ideally support various roles – anonymous users, registered users and administrators at various levels.
It looks to me like PEAR hasn’t changed much because it’s stable. I wouldn’t be afraid of using it.