Wiki Follow @yiiframework

warning: While this security guide tries to be quite complete, is not exhaustive. If security matters for you, you ought to check several other references.

I would like to provide you a quick tip on how to implement user level access to your Yii applications.

The Portable PHP password hashing framework allows advanced password hashing offering increased security over simple MD5- or SHA1-hashed passwords. phpass is already in use in some larger projects such as WordPress (since v2.5), Drupal 7 and phpBB 3.

If you need simple Role based access control without the long RBAC process then this article is just for you. Lets jump to the point.

By default, the expression Yii::app()->user returns a CWebUser application component which represents the information that are closely related with the current user. Some information can be persistent throughout the current user session. For example, CWebUser already comes with a name property that stores the username of the current user.

There Is Now A cpasswordhelper Class In system.utils at GitHub that provides an API to simplify the use of crypt() for password storage. While this wiki article remains valid, it will in due course be rewritten to refer to the new class as well as explain how it works.

I recently created a project called Yii-App on GitHub to kickstart my development of smaller Yii applications. The main goal of the project is to provide a ready-to-use application template that includes my bootstrap extension and many other useful extensions. After reading this article you will be able to use this project as a starting point for all of your Yii projects.

If you want to add module based login to a site without using RBAC, please follow these guidelines.

Yii does not have an LDAP class itself, but its very easy to implement LDAP in the stock UserIdentity class.

Todos los que hemos empezado a utilizar Yii para crear aplicaciones Web, nos hemos dado de bruces cuando hemos intentado poner a funcionar el RBAC (acceso de control basado en roles).