The Login Controller
Thursday, October 28, 2010

Following on from my overview of authentication and access control, I intend to first look at the implementation of a Login controller. This will handle two basic request: /login and /login/logout. These correspond to a user’s attempt to login via the login form, and a logout request, typically via a page link. (more…)

Posted by James at 8:30 pm   2 comments

Implementing Authentication and Access Control using the Zend Framework
Saturday, October 23, 2010

One of the most common, but often complex to implement, features of websites is the facility for users to log in and out of the site, thus allowing them to view content and perform actions that would otherwise be denied to them. The Zend Framework does not provide a single all-in-one component, since the possible approaches are so diverse, but rather provides separate components for authentication (Zend_Auth) and access control (Zend_Acl), and a mechanism for incorporating them into the dispatch process (controller plugins). (more…)

Posted by James at 7:31 pm   2 comments