The Bakery Everything CakePHP

Thanks for the article - haven't digested it all yet, but like you the first thing I do is user auth in my apps. I'll give this a look

Hi,

I'm newbie in cakePHP and I think this article is written in very bad way. Why you didn't create COMPLETE GUIDE ? You wrote sentenses like: "Look at the Cake Manual for how to setup the Models for these tables.", "var $uses = array ('YOUR_MODEL_FOR_USERS'); ", and so on.

I'm newbie and I don't know what you mean. I looked at manual but it still doesn't work !!!

I have errors like : "SQL Error: 1054: Unknown column 'User.email' in 'where clause'", when I go to "cake_1.2beta/users/_login" it has error "Error: UsersController::_login() cannot be accessed directly.", and so on ...

I know that I mistakely did something, BUT YOU CAN WRITE ARTICLES MORE UNDERSTAND ...

What do you recommend me ?

thx

I don't think its really necessary to tell the author his article isn't written well when the problem is obviously your lack of understanding CakePHP, as you admitted. If you are unfamiliar with the framework then a good place to start would be the docs. Either http://tempdocs.cakephp.org/ for the BETA or http://manual.cakephp.org/ for the stable release.

We are all newbies once and I know exactly how you feel, when I first started I was completely lost (coming from an ASP.NET background to PHP), but it is through the docs and articles like these that I have quickly picked it up.

As far as the problems you have, the SQL error means you have not created the correct columns in your table.

"Look at the Cake Manual for how to setup the Models for these tables." - Means just that - go check out the documentation and samples that are available and you will quickly see how to implement the models for your application.

Anyways, I for one would like to say thank you to the author, I am in the middle of implementing this in my current project and it's looking promising. Great job

That's true, but ... Anyway, I'll study more, ...

I am trying to get DarkAuth to work with Cake 1.2.0.6311. It is looking promising... but right now I am stuck.

I followed all your steps and am using your login and deny pages. DarkAuth is protecting a test controller, but after completing the login form I am not getting the page of the controller action. All I get is the Debug info, which is shown at the bottom of the page with the CakePHP default views. After reloading or loading another action manually, I get the correct behavior.

As I have by now started with freshly baked controllers/views a couple of times I begin to wonder whether this is an Apache or DarkAuth problem.

Any ideas?

Thanks for the nice component!

I followed all your steps and am using your login and deny pages. DarkAuth is protecting a test controller, but after completing the login form I am not getting the page of the controller action.
I had the same problem, I found a workaround by removing the line
exit();
from the _login() function in app_controller.php and sobstituting it with:
$this->redirect('./');

Hope that works

I'm trying to implement this auth system in one of my projects. Now I have a question: I'm trying to add authentication to my home page (that is home.ctp). Now, this page has no controller, so how can darkauth e aware of it?

I'll try to describe my problem more in depth: I've successfully applied darkauth to a User model, so if I try to access /cake/users I get my login screen, and everything works fine.
Now, if I want to go back to my site homepage, located in /cake, I get an error:

Undefined property: PagesController::$User [APP/controllers/components/dark_auth.php, line 248]
Line 248 says:

$check = $this->controller->{$this->user_model_name}->find($conditions);

And I can understand the error, since home.ctp has no controller associated.
home.ctp shows correctly if I logout from darkauth...
What if I'd like to show a different content on the home page for logged/unlogged users? Is it possibile?
Thanks in advance and sorry for the long post.

I followed all your steps and am using your login and deny pages. DarkAuth is protecting a test controller, but after completing the login form I am not getting the page of the controller action.
I had the same problem, I found a workaround by removing the line
exit();
from the _login() function in app_controller.php and sobstituting it with:
$this->redirect('./');

Hope that works

First, I would like to thank Chris Walker or this wonderful component. It is simple, straightforward and fully working.

My approach to the problem above is to include this line:

$this->redirect($this->referer());

just before the exit();

This way, the user is redirected to the url he wants to.

It looks like you haven't added the
$uses = array('User');

That was the point: I added 'user' (lowercase), that's why it didn't work! Thanks for the tip and keep improving darkauth!

When the function destroyData() is called, it destroys all session data, while it should only delete the session data set by DarkAuth.

To fix this, replace:
$this->Session->destroy($this->secure_key());
by
$this->Session->delete($this->secure_key());

Thanks, I've updated this in the article. Also I have updated the code in a much bigger way, adding some new features and improving efficiency, and have posted a new article with it - which hasn't been moderated yet. Sometime soon it should be available at: http://bakery.cakephp.org/articles/view/darkauth-v1-3-an-auth-component
Hi Chris, any ideas when the article might be moderated? I am quite interested in the updated code for my new project :)

Chris May be this could help someone :

STEP [ 1 ] Create 3 tables, if you have users table just add this fields (live, username, password)
CREATE TABLE `users` (
`id` int(11) NOT NULL auto_increment,
`created` datetime default NULL,
`modified` datetime default NULL,
`live` tinyint(1) NOT NULL default 0,
`username` varchar(16) NOT NULL default '',
`passwd` varchar(32) NOT NULL default '',
PRIMARY KEY (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8;

CREATE TABLE `groups` (
`id` int(11) NOT NULL auto_increment,
`created` datetime default NULL,
`modified` datetime default NULL,
`live` tinyint(1) NOT NULL default 0,
`name` varchar(32) NOT NULL default '',
PRIMARY KEY (`id`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8;

CREATE TABLE `groups_users` (
`group_id` int(11) NOT NULL,
`user_id` int(11) NOT NULL,
KEY `group_id` (`group_id`,`user_id`)
) ENGINE=MyISAM DEFAULT CHARSET=utf8;

STEP [ 2 ] Create Group Model (/app/models/group.php)

Model Class:

<?php 

class Group extends AppModel {

    var $name = 'Group';

    var $useTable = 'groups';

}

?>
STEP [ 3 ] Add HABTM to your user's model (/app/models/user.php)

var $hasAndBelongsToMany = array('Group' => array('className'    => 'Group',
        'joinTable'    => 'groups_users',
        'foreignKey'   => 'user_id',
        'associationForeignKey'=> 'group_id',
        'unique'       => true
        )
    );

STEP [ 4 ] Modify your appcontroller like mine (/app/app_controller.php)

Controller Class:

<?php 
class AppController extends Controller {
    var $helpers = array('Form', 'Html', 'Javascript', 'Session');
    var $uses = array('User', 'Group');
    var $components = array('DarkAuth');
    
    function _login(){
        if(is_array($this->data) && array_key_exists('DarkAuth',$this->data) ){
            $this->DarkAuth->authenticate_from_post($this->data['DarkAuth']);
            $this->data['DarkAuth']['password'] = '';
        }
    }

    function logout(){
        $this->DarkAuth->logout();
    }
}
?>
STEP [ 5 ] Put DarkAuth Component as (/app/controllers/components/dark_auth.php)
You can get the code from author site http://thechriswalker.net/darkauth-2

Component Class:

<?php 
class DarkAuthComponent extends Object {
    ....
}
?>

STEP [ 6 ] Add some view (/app/views/login.ctp)

View Template:


<?
   $this->pageTitle = 'Access Restricted';
   echo $form->create('DarkAuth',array('url'=>substr($this->here,strlen($this->base))));
   echo $form->input('DarkAuth.username');
   echo $form->password('DarkAuth.password');
                
   echo $form->end('login');
?>
and (/app/views/deny.ctp)

View Template:


<?php
    $this->pageTitle = 'Access Denied!';
?>
<p>I'm sorry, but you don't have sufficient permission to access this page!</p>

and then modify (/app/controllers/components/dark_auth.php) to match your password encryption type.
find "function hasher".

  function hasher($plain_text){
    $hashed = md5('dark'.$plain_text.'cake');
    return $hashed;
  }
in this default hasher your password should be
UPDATE users SET password = MD5('dark....cake') WHERE id = ....

find "$user_name_field" and set variable as your table's field

var $user_name_field = 'email';
var $user_pass_field = 'pswd';
because we use 'username' and 'password' from CREATE TABLE above, so we have to set like this :

var $user_name_field = 'username';
var $user_pass_field = 'passwd';

STEP [ 7 ] Add new records to your table

INSERT INTO `groups` (`created`, `modified`, `live`, `name`) VALUES
(NOW(), NOW(), 1, 'Admin'),
(NOW(), NOW(), 1, 'Root');

INSERT INTO `groups_users` (`group_id`, `user_id`) VALUES
(1, 1);

INSERT INTO `users` (`live`, `username`, `passwd`) VALUES 
('1', 'YOURNAME', MD5('darkMYPASSWORDcake')); 

STEP [ 8 ] Put any rules in your controller

var $_DarkAuth = array('required'=>array('Admin','Member'));

eg : in my User controller

Controller Class:

<?php 

class UsersController extends AppController {

    var $name = 'Users';

    var $helpers = array('Html', 'Form');
    var $_DarkAuth = array('required'=>array('Admin','Member'));
    
    ...
    ...
}
?>
STEP [ 9 ] Testing go to http://yourapps/users/login, type YOURNAME as username
and MYPASSWORD as password.

Happy coding...thanks to Chris

I still have the problem that the login page doesn´t redirect me to the restricted area. It keeps displaying the login form.

I am using CakePHP 1.2 RC 3 and downloaded the test application from: http://thechriswalker.net/files/DarkAuth.test.app.zip

I allthough tried adding $this->redirect('./'); to the function _login() in app_controler.php

Any Ideas?