Wiki Follow @yiiframework

This is a very simple tutorial that demonstrates how to redirect user back to the returnUrl if he is already logged in.

This article tries to explain the steps required in integrating the HybridAuth into Yii directly, without using an extension.

In this wiki, I try to implement a simple authorization schema without putting much logic inside a file or into database table. We are constructing authorization hierarchy inside the controller. We are getting roles for the current user from database table and assigning only roles to user that are declared in the particular controller. We have brought down the work of loading of auth data at main application level to controller level. This way we have pulverised auth data for entire site into smaller units. Finally we are going to look at couple of examples.

There Is Now A cpasswordhelper Class In system.utils at GitHub that provides an API to simplify the use of crypt() for password storage. While this wiki article remains valid, it will in due course be rewritten to refer to the new class as well as explain how it works.

After creating an yii app . we need to implement permission, Authentication and Authorization .so the best way is to use the Yii users and Rights modules.

I recently created a project called Yii-App on GitHub to kickstart my development of smaller Yii applications. The main goal of the project is to provide a ready-to-use application template that includes my bootstrap extension and many other useful extensions. After reading this article you will be able to use this project as a starting point for all of your Yii projects.

warning: While this security guide tries to be quite complete, is not exhaustive. If security matters for you, you ought to check several other references.

In this cookbook I will attempt to explain how to use the lightweight version of Role-Based Access Control using a php file. This version does not use database but a php file and is controlled by CPhpAuthManager class.

If you need simple Role based access control without the long RBAC process then this article is just for you. Lets jump to the point.

After adding proper form to the main layout, like: