PHPlib:Manual: Using core features of PHPlib

Using core features of PHPlib

Many applications don't use PHPlib's advanced features, but see PHPlib as a convenient way to protect pages or functionality with passwords. This section covers such core functionality usage of PHPlib.

print md5(uniqid("some magic string")

you will get a user id, then do -

insert into auth_user values ( "that userid", "username", "password", "permissions");

Creating an unprotected session page

Begin that page with

	<?php page_open(array("sess" => "Example_Session")); ?>

End that page with

	<?php page_close(); ?>

Creating an protected session page

Begin that page with

	<?php
  	page_open(
         array("sess" => "Example_Session",
               "auth" => "Example_Auth",
               "perm" => "Example_Perm"));
  	$perm->check("desired protection");
	?>

End that page with

	<?php page_close(); ?>

Creating protected functionality

Begin that page with

	<?php
  	page_open(
         array("sess" => "Example_Session",
               "auth" => "Example_Auth",
               "perm" => "Example_Perm"));
	?>

End that page with

	<?php page_close(); ?>

Enclose the protected functionality in

    <?php
         if ($perm->have_perm("desired protection")):
    ?>
    
         Put protected HTML or PHP here
         
    <?php
         endif
    ?>

Note: desired protection is any combination of permissions from Example_Perm. Using the default values from Example_Perm, "user", "user,author" or "admin" are all valid sample values. A user can access a page, if that user has all permissions that are being requested in a $perm->check() or $perm->have_perm() call.

Note: Users can have multiple permission in their perms column of auth_user. A user with perms "user,author,editor" can access all pages requesting any combination of these permissions.

Note: If $auth->auth["uid"] is set on a protected page and if (time < auth->auth["exp"]), then and only then the authentication is valid. You may then use $auth->auth["uname"] as the user name, $auth->auth["uid"] as a unique user id and $auth->auth["perm"] for the current permissions of that user. Actually, you never want to touch$auth->auth["perm"] manually, but use $perm->have_perm("...") for that.

	Thursday, August 28, 2008
	download \| documentation \| faq \| changelog \| resources

search for in the

Using core features of PHPlib

Customizing the login screen

Customizing the permission levels

Creating new users

Creating an unprotected session page

Creating an protected session page

Creating protected functionality