yii: security concerns regarding autologin, sessions and cookies
by prettyscripts on 2011-02-22 12:18:36 • Leave a comment »
this post requires basic understanding about yii framework's authentication and authorization. while researching about using php session variable to keep persistent data in a yii-based project, i came across this thread that discussed security implicat… more »
yii: authenticated user only access to a module
by prettyscripts on 2010-11-08 11:39:03 • Leave a comment »
to allow authenticated user only to the whole module, instead of repeating codes to define access rules in all controller files, just add the following code to the module file in beforeControllerAction() function:
public function beforeControllerActio… more »
snews: password recovery
by prettyscripts on 2009-05-13 12:19:33 • Leave a comment »
snews uses a single login system. user name and password is stored in table settings and the data is encrypted to some random long string.
if you forgot yoru password, it doesn't seem to have any links to retrieve / reset password.
a look at the sour… more »
Affiliates
©2012 by prettyscripts.• powered by b2evolution • skin by prettyscripts