Comments on: CakePHP User Auth

By: Alan Whitney

Alan Whitney — Wed, 24 Sep 2008 13:26:26 +0000

If you are using cake 1.2RC2, the manual is the only way to go. It’s the only good way to do auth.

http://manual.cakephp.org/view/172/Authentication

By: Manish Sanger

Manish Sanger — Wed, 24 Sep 2008 12:48:03 +0000

Hi
tried this method using request handler, but it loads the login page in a updating div.
Please help.
Thanks in advance.

By: Alan Whitney

Alan Whitney — Mon, 31 Mar 2008 12:23:04 +0000

thanks audru, that is a good idea.

By: andru

andru — Mon, 31 Mar 2008 10:57:23 +0000

Also for your validation, you could just make one method to check the uniqueness of a field, and pass the field name in as a parameter

By: Alan Whitney

Alan Whitney — Mon, 17 Mar 2008 10:21:38 +0000

Sorry for the no tabs. Just had a little problem with the wordpress editor. I am working on a better login redirect, to redirect to the page that they were trying to go to.

I don’t think it infinite loops (the code is in use), I only call checkSession on pages where login is required.

By: hutchic

hutchic — Mon, 17 Mar 2008 04:12:48 +0000

I know I’m paranoid but I allways NULL out sensitive information before creating a session ie:

$user['password'] = NULL;
$this->Session->write(’User’, $user);

but that’s just my personal preference. I’d also suggest a way to set a redirect in the login functionality. In checksession if there is no user session and the action requested wasn’t the login /logout action or any others that would infinite loop set a session variable called redirect. Then on login use that variable for $this->redirect …. also proper tabbing would make this more readable