Part of the EllisLab Network
CodeIgniter  >   Forum Home  >  CodeIgniter Development Forums  >  Ignited Code  >  Thread
   
1 of 30
1
2
3
Next
Last »
Redux Authentication 1.4a (24th July 2008)
 
Popcorn
Posted: 24 February 2008 10:18 AM   [ Ignore ]  
Lab Assistant
RankRank
Total Posts:  239
Joined  11-08-2007

The Redux Authentication System

Redux Authentication is a great CodeIgniter Auth library. It’s light, easy to use and fully featured. It’s a great choice for your new or existing project due to the power it gives to the developer.

Redux Authentication

 Signature 

Redux Authentication 2 Beta

Redux Authentication is a basic authentication package for CodeIgniter that helps you setup a membership system in minutes, even faster if you use our pre made package which has all the views and controllers set up for you.

Profile
 
 
Popcorn
Posted: 25 February 2008 03:49 PM   [ Ignore ]   [ # 1 ]  
Lab Assistant
RankRank
Total Posts:  239
Joined  11-08-2007

Update :

Encryption System
Since having a discussion with a member of the CodeIgniter community (Sikkle) I decided to opt out of having the ability to choose different encryption levels. The default installation will hash the password with a file and database salt.

The idea behind this is that if a hacker gets hold of your database, their attempts at trying to bruteforce your encypted passwords will fail because the password is also hashed with another file based string.

The database salt is also dynamically generated on user registration making it virtually uncrackable (I have to say virtually, because there’s always the chance however low it may be)

I was also originally worried it might add more queries, but I’ve worked out that was not the case so seeing how everyone is paranoid about security I’ve made the most secure method the default one.

So that’s the encyption system renovated.

I’ll now work on the other features.

Ps : Thanks to Sikkle various help. I noticed lots of hits to the website. I’d love to hear your feedback smile

 Signature 

Redux Authentication 2 Beta

Redux Authentication is a basic authentication package for CodeIgniter that helps you setup a membership system in minutes, even faster if you use our pre made package which has all the views and controllers set up for you.

Profile
 
 
peavyfr
Posted: 27 February 2008 10:22 AM   [ Ignore ]   [ # 2 ]  
Summer Student
Total Posts:  1
Joined  02-27-2008

Thanks for the work done
I think an ACL should be provided within Code Igniter, but… this alternative solution is welcome.

Profile
 
 
sikkle
Posted: 27 February 2008 10:55 AM   [ Ignore ]   [ # 3 ]  
Research Assistant
RankRankRank
Total Posts:  445
Joined  05-21-2007

Great work Popcorn,

i’ll keep looking at the progress, i think this is another realy good addition, also i have to tell the comment in the file are just great.

peavyfr : it’s realy hard to implement ONE standard solution, auth and ACL could be handle in so many way, file, database, sub-level, multiple-controller, per method etc. etc.

This little auth-acl is a great addition by the way it’s builded and trying to provide “simple” solution.

So i’ll say keep working on that one, keep us posted.

good luck !

 Signature 

-> None official irc channel [ irc.freenode.net #codeigniter ]

Profile
 
 
Popcorn
Posted: 27 February 2008 11:53 AM   [ Ignore ]   [ # 4 ]  
Lab Assistant
RankRank
Total Posts:  239
Joined  11-08-2007

Thanks for the comments.

Update :

I’ve finished the auto generation of the additional columns. You shouldn’t have to mess with the database now and can add fields on the fly by just adding a new line in the configuration file.

 Signature 

Redux Authentication 2 Beta

Redux Authentication is a basic authentication package for CodeIgniter that helps you setup a membership system in minutes, even faster if you use our pre made package which has all the views and controllers set up for you.

Profile
 
 
coldKingdom
Posted: 27 February 2008 12:23 PM   [ Ignore ]   [ # 5 ]  
Summer Student
Total Posts:  29
Joined  02-08-2008

Great auth lib!

Some small bugs have occured in check_group, and probably the other checkers as well.
Now

function check_group ( $email, $table, $left)
    {
        /*
        SELECT levelde_group.title
        FROM levelde_group
        LEFT JOIN levelde_user
        ON levelde_group.id = levelde_users.group
        WHERE levelde_users.email = ''
        */
        
        $this->db->select('group.title');
        $this->db->from($table);
        $this->db->join($left, $table .'.id = '.$left.'.group', 'left');
        $this->db->where($left .'.email', $email);

        return $this->db->get();
    }

Should be (i believe)

function check_group ( $email, $table, $left)
    {
        /*
        SELECT levelde_group.title
        FROM levelde_group
        LEFT JOIN levelde_user
        ON levelde_group.id = levelde_users.group
        WHERE levelde_users.email = ''
        */
        
        $this->db->select($table.'.title'); //Added the $table here
        $this->db->from($table);
        $this->db->join($left, $table .'.id = '.$left.'.group', 'left');
        $this->db->where($left .'.email', $email);

        return $this->db->get();
    }

Thank you!

Profile
 
 
Popcorn
Posted: 27 February 2008 12:31 PM   [ Ignore ]   [ # 6 ]  
Lab Assistant
RankRank
Total Posts:  239
Joined  11-08-2007

Thanks.

I just fixed that and updated the auth_lib on the site.

Glad you like it smile

 Signature 

Redux Authentication 2 Beta

Redux Authentication is a basic authentication package for CodeIgniter that helps you setup a membership system in minutes, even faster if you use our pre made package which has all the views and controllers set up for you.

Profile
 
 
coldKingdom
Posted: 27 February 2008 12:38 PM   [ Ignore ]   [ # 7 ]  
Summer Student
Total Posts:  29
Joined  02-08-2008

I still get the old files from your site even though the zip have been updated.

Anyway, this check_group thing. Wouldn’t it be better if it returned the group number so you can check it right away without any trouble? smile

Profile
 
 
louis w
Posted: 27 February 2008 01:15 PM   [ Ignore ]   [ # 8 ]  
Research Assistant
Avatar
RankRankRank
Total Posts:  554
Joined  02-04-2008

Why are you putting so much effort into being able to get back a password from the encrypted value? Why not just do a one way encrypt and compare against that. This is most secure.

Profile
 
 
PedroGrilo
Posted: 27 February 2008 01:18 PM   [ Ignore ]   [ # 9 ]  
Summer Student
Total Posts:  18
Joined  01-23-2008

Is this PHP 5 only?
ThanX

Profile
 
 
Popcorn
Posted: 27 February 2008 01:36 PM   [ Ignore ]   [ # 10 ]  
Lab Assistant
RankRank
Total Posts:  239
Joined  11-08-2007

coldKingdom :
Well, I thought it would be more usable to do : if($this->auth->check_group($email) === ‘admin’) rather than use a integer.

louis w :
It is 1 way encryption with 2 different salts. Sorry if I didn’t make this clear before.

PedroGrilo :
It uses __construct which isn’t available in PHP4.

 Signature 

Redux Authentication 2 Beta

Redux Authentication is a basic authentication package for CodeIgniter that helps you setup a membership system in minutes, even faster if you use our pre made package which has all the views and controllers set up for you.

Profile
 
 
   
1 of 30
1
2
3
Next
Last »
 
‹‹ Forums      Cache library with memcache support ››
Post Marker Legend
New Topic New posts Hot Topic Hot Topic with new posts New Poll New Poll Moved Topic Moved Topic Sticky Topic Sticky topic
Old Topic No new posts Hot Old Topic Hot Topic with no new posts Old Poll Old Poll Closed Topic Closed Topic Announcement Announcements
Theme
Change Theme
Visitor Statistics
The most visitors ever was 719, on June 06, 2008 10:16 AM
Total Registered Members: 77530 Total Logged-in Users: 30
Total Topics: 101537 Total Anonymous Users: 3
Total Replies: 544308 Total Guests: 271
Total Posts: 645845    
Members ( View Memberlist )
Newest Members:  mkmrgn30,  top10review722,  AlanK3818,  gemmortgages,  cdlabel,  ttapan,  gradozero,  sagaasu44,  bovinecolostrum,  nvacclogic583329
Active Members:    adi003,  andriod,  Armchair Samurai,  Caelis,  cahva,  cristian_c,  Crucial,  denbad,  ezsolt,  garymardell,  Gaz,  herrkaleun,  JasonS,  jayrulez,  jedd,  john lanz,  kea13,  klassev,  kusmayadi,  MrEnirO,  Pascal Kriete,  pascaln,  sofwan,  spmckee,  spyesx,  steven2,  TofuMatt,  tonydewan,  tschunde,  _Michael_
Powered By ExpressionEngine
ExpressionEngine Discussion Forum - Version 2.1.1 (20081028)
Script Executed in 0.6082 seconds
Atom Feed   RSS 2.0