Multiple User Login Security and Tracking 1

[evil1966]

Can anyone point me to a good tutorial to get me started with this? The mySQL database heavy website I'm creating will need to have login security where some members have defined rights to access certain pages. For example everyone (with a login) can access a donor info list page and add new donors, but only one or two people can access the page with donation information and make donation adds. I also want to track the adds and edits to the database with the user and time stamp if there's a problem in the future. I know I can just password protect the pages using the .htaccess available on the web server, but I don't think that will work for this.

Thank you.

 

[ChrisHirst]

http://www.phpclasses.org/package/1906-PHP-Site-user-registration-and-page-access-restriction.html

Chris.

Indifference will be the downfall of mankind, but who cares?
Time flies like an arrow, however, fruit flies like a banana.
Webmaster Forum

 

[evil1966]

Thanks Chris. I was hoping to find something I didn't have to pay for, but I may have to bite the bullet and go there. At least I'll get course help doing this.

 

[evil1966]

Oh! I'm logged in that site now. No payment required. Excellent! Thanks again Chris.

 

[spamjim]

Another option would be to use an existing framework that can do all this without a patchwork of sources. What you wish to do could be done with Drupal and CCK and Views. As you don't dive into PHP often, a major open source project like Drupal is maintained by an army of skilled coders... leaving you to focus on what you want the web service to do (and not worrying about security).

 

[evil1966]

Thanks spamjim. I'll look into that too.

 

[jpadie]

WordPress might be OK for this. Particularly with the role manager plugin

But best of all is for you to plan your needs carefully and build the security in from the ground up. Too many solutions apply security as an overlay and then muddle authentication and authorisation.

It is easy to get right if you take a step back and think the paradigms through carefully.

 

[evil1966]

jpadie,

I abandoned Wordpress, but I could go back. I do want to get the security in before any more other work gets done for the very reasons you state above.

 

[jpadie]

If I have time I will look in my archive this weekend. I am sure I wrote a full featured user admin authentication and authorisation platform a number of years ago.

There is also liveuser in pear which is very full featured. I'm not sure it is still maintained though.

 

[evil1966]

Wow, that would be great and very nice. I love to learn this stuff, but I don't often get to use it.