Forum PHP.pl

[PHP] pobierz, plaintext 
<?php
 
 class Plugin_Acl extends Zend_Controller_Plugin_Abstract
 {
	 public function preDispatch(Zend_Controller_Request_Abstract $request) 
	 {
 
		 $acl = new Zend_Acl();
		 $acl->addRole('guest');
		 $acl->addRole('user', 'guest');
		 $acl->addRole('administrator');
 
		 $acl->addResource('default:index');
		 $acl->addResource('default:index2');
		 $acl->addResource('default:contact');
		$acl->addResource('default:test');
		$acl->addResource('default:error');
		$acl->addResource('default:registration');
		$acl->addResource('default:activation');
		$acl->addResource('default');
 
		$acl->addResource('content:index');
		$acl->addResource('content:admin');
 
		$acl->addResource('gallery:index');
		$acl->addResource('gallery:admin');
 
		$acl->addResource('admin:index');
		$acl->addResource('admin:admin');
		$acl->addResource('admin:user');
		$acl->addResource('admin:registration');
		$acl->addResource('admin:Articles');
		$acl->addResource('admin:addarticle');
		$acl->addResource('admin:deletearticle');
		$acl->addResource('admin:editarticle');
		$acl->addResource('admin:map');
		$acl->addResource('admin:foto');
		$acl->addResource('admin:upload');
 
		$acl->addResource('admin');
 
		$acl->allow('guest', 'admin:Articles');
		$acl->allow('guest', 'default');
		$acl->allow('guest', 'default:index');
		$acl->allow('guest', 'default:index2');
		$acl->allow('guest', 'default:error');
		$acl->allow('guest', 'default:registration');
		$acl->allow('guest', 'default:activation');
		$acl->allow('guest', 'default:test');
		//$acl->allow('guest', 'admin');
		$acl->allow('guest', 'admin:registration');
 
		$acl->allow('guest', 'admin:index', 'index');
		$acl->allow('guest', 'admin:index', 'login');
 
		$acl->allow('guest', 'default:index', 'register');
		$acl->allow('guest', 'default:error'); 
		$acl->allow('administrator');
 
		// /* Użytkownik */
		$user = Zend_Auth::getInstance()->getIdentity();
		if (null === $user) {
		$role = 'guest';
		} else {
		$role = $user->role;
		}
 
		/* Czy użytkownik ma prawo dostępu? */
		if (!$acl->isAllowed($role, $request->getModuleName('admin') . ':'
		. $request->getControllerName('user'), $request->getActionName('login'))) {
		print ('Nie masz dostępu do tej części witryny!');
		}
 
		$auth = Zend_Auth::getInstance();
		if($auth->hasIdentity()) {
			$identity = $auth->getIdentity();
			$role = strtolower($identity->role);
			}else{
			$role = 'guest';
		}
		$module = $request->module;
		$controller = $request->controller;
		$action = $request->action;
		if (!$acl->isAllowed($role, $module, $controller, $action)) {
			if ($role == 'guest') {
				$request->setModuleName('admin');
				$request->setControllerName('user');
				$request->setActionName('login');
				} else {
					$request->setModuleName('admin');
				$request->setControllerName('error');
				$request->setActionName('noauth');
			}
		}
	}
 
}
?>
 
[PHP] pobierz, plaintext 

[PHP] pobierz, plaintext 
	public function loginAction()
	{
		// action body
		$userForm = new Admin_Form_User();
		$usersDAO = new Default_Model_Users();
		$userForm->setAction('/login');
		$userForm->removeElement('first_name');
		$userForm->removeElement('last_name');
		$userForm->removeElement('role');
		if ($this->_request->isPost() && $userForm->isValid($_POST)) {
			$data = $userForm->getValues();
			//set up the auth adapter
			// get the default db adapter
			$db = Zend_Db_Table::getDefaultAdapter();
			//create the auth adapter
			$authAdapter = new Zend_Auth_Adapter_DbTable($db, 'users',
			'username', 'password');
			//set the username and password
			$authAdapter->setIdentity($data['username']);
			$authAdapter->setCredential(md5($data['password']));
			//authenticate
			$result = $authAdapter->authenticate();
			if ($result->isValid()) {
 
				// store the username, first and last names of the user
				$auth = Zend_Auth::getInstance();
				$storage = $auth->getStorage();
				$storage->write($authAdapter->getResultRowObject(
				array('id', 'username' , 'first_name' , 'last_name', 'role')));
 
 
				$user = $usersDAO->fetchRowByUser($data['username']);
				// Is accout active
				if(@$user->active){
					return $this->_forward('index');
				} else {
					//print $user->active;
					Zend_Auth::getInstance()->clearIdentity();
					print 'Twoje konto nie zostało jeszcze aktywowane';	
				}
			} else {
			$this->view->loginMessage = "Sorry, your username or
			password was incorrect";
			}
		}
		$this->view->form = $userForm;
	}
 
	public function logoutAction()
	{
		// action body
		$authAdapter = Zend_Auth::getInstance();
		$authAdapter->clearIdentity();
	}
[PHP] pobierz, plaintext