Deskripsi
How to implement Authentication (login) using Cakephp Framework 2.X
Required
1. Understand Form , Model , Controller , Routes
How To
1. Create table in your database and give it name "user", create 3 field : user_id, username , password.
2. Create Model , give it name "testModel.php"
<?php
class testModel extends AppModel
{
var $useDBConfig = 'default';
var $name = 'testModel '; //must same with file name
var $primaryKey = 'id_user'; // primary key table
var $useTable = 'user'; // same as table name in database
public $validate = array(
'username' => array(
'required' => array(
'rule' => array('notEmpty'),
'message' => 'A username is required'
)
),
'password' => array(
'required' => array(
'rule' => array('notEmpty'),
'message' => 'A password is required'
)
));
}
?>
3. open file in path app/controller/AppController.php
add code like this :
class AppController extends Controller { //you can find this line in the bottom
/* Executing All Controller*/
var $uses = array('userlogin');
/* ----- */
public $components = array(
'Session',
'Auth' => array(
'loginAction' => array('controller' => 'autentikasi','action' => 'login'),
'authenticate' => array(
'Form' => array(
'userModel' => 'userlogin',
'fields' => array('username' => 'username/email',
'password' => 'password' )
)
),
'Form','Basic',
'loginRedirect' => array('controller' => 'Main',
'action' => 'index'
),
'logoutRedirect' => array(
'controller' => 'autentikasi',
'action' => 'login'
),
'authorize' => array('Controller'), // <- activate isAuthorize()
)
);
public function beforeFilter(){
$this->layout = false;
$this->Auth->deny('*');
// don't forget to allow the action you'll be execute , if not it always forever loop to login page.
$this->Auth->allow('login','not_supported');
}
public function isAuthorized($user) {
// jika berhasil login , dapatkan data user
if (isset($user['userlogin']['username']))
{
$dataUser = $this->userlogin->find('all', array('fields'=>array('userlogin.username','userlogin.role'),
'limit' => 10,
'conditions' => array('userlogin.username' => $user['userlogin']['username'],
'userlogin.password' => $user['userlogin']['password']
),
'order'=>array('userlogin.username' => 'ASC')));
if(!empty($dataUser))
{
$this->Session->write('login',true);
$this->Session->write('username',$dataUser[0]['userlogin']['username']);
$this->Session->write('role',$dataUser[0]['userlogin']['role']);
return true;
}
else
{
$this->redirect($this->Auth->logout()); //force logout if false username and password
return false; //return false auth->login
}
}
else
{
echo "Session failure please relogin !";
return false;
}
}
}
4. open or create file in path app/controller/testAuthController.php
<?php
class testAuthController extends AppController {
var $uses = array('testModel ');
public function index() {
if ($this->request->is('post')) {
if ($this->Auth->login($this->request->data))
{
return $this->redirect($this->Auth->redirect());
}
else
{
$this->Session->setFlash(__('Invalid username or password, try again'));
}
}
}
public function logout() {
return $this->redirect($this->Auth->logout()); // this is calling logout redirect for button logout
}
}
5. Now create form login for index action
<?php echo $this->Session->flash('auth'); ?>
<?php echo $this->Form->create('testModel',
array('url'=>array('controller'=>'testAuth','action'=>'index'))); ?>
<fieldset>
<legend>
<?php echo __('Please enter your username and password'); ?>
</legend>
<?php echo $this->Form->input('username'); // this data passing to username auth
echo $this->Form->input('password'); // this data passing to password auth
?>
</fieldset>
<?php echo $this->Form->end(__('Login'));
?>
6. Create routes for pretty url, open file in app/config/routes
add line :
Router::connect('/', array('controller' => 'testAuth', 'action' => 'index', 'home'));
Router::connect('/login/*', array('controller' => 'testAuth', 'action' => 'index'));
Note :
1. if user not login , all page cannot be access and always redirect to login page.
2. if success login , all user can access ALL PAGE , to handle this authorization each user, you can use SESSION :)
3. if user logout , automaticly redirect to login page.
Work Greats , Happy Learning...
Note:
- Edited : fix code authentication
