PHP - Is There An Y Library Available For Role Based Authentication In Codeigniter?

Hello all! So glad I found this forum. I would appreciate some assistance please.

I'm working on a filter for a Custom Post Type . I need it to filter the list depending on the user's role. The way this should work is the following...

* Users in roles "formusers1" and "formusers2" can post. Users can only see their own posts.
* Users in role "formchecker1" can see all posts assigned role "formusers1' and can approve each post.
* Users in role "formchecker2" can see all posts assigned role "formusers2' and can approve each post.
* Users in roles "formsupervisor" and "administrator" can see everyone's posts.

So far I can filter by roles "formusers1" and "formusers2" using  `$query->set('author', $current_user->ID);` . However, when try to filter the list for role "formchecker1" I see posts from all roles. What am I doing wrong? Here's the rest of the code. Thanks for checking out!

```
add_action('pre_get_posts', 'filter_posts_list');

function filter_posts_list($query) {
    //GLOBAL VARIABLES
    global $pagenow, $typenow;

    //MY VARIABLES
    global $current_user;
    get_currentuserinfo();

    //FILTERING
    if (current_user_can('formchecker1') && ('edit.php' == $pagenow) &&  $typenow == 'mycustomcpt' ) {
        $query->set('author', 'formusers1');
    }

    if (current_user_can('formchecker2') && ('edit.php' == $pagenow) &&  $typenow == 'mycustomcpt' ) {
        $query->set('author', 'formusers2');
    }

    if ((current_user_can('formusers1') || current_user_can('formusers2')) && ('edit.php' == $pagenow) &&  $typenow == 'mycustomcpt') {
        $query->set('author', $current_user->ID);
    }
}
```

I am trying to populate a custom field called "Customer Type" current user role.  The custom field is displayed on my checkout page.   I tried the below in my functions.php of my child theme and thought it would work but it does nothing.  Can anyone tell me what I might be doing wrong?  

$user = wp_get_current_user();
function onboarding_update_fields( $fields = array() ) {

       $fields['customertype'] = $user;

   return $fields;
}

add_filter( 'woocommerce_checkout_fields', 'onboarding_update_fields' );

Edited April 11 by JayX

Hi,

Hi need help with pagination of my page where the advertiser is showing. here is my website. photoagahi.com

search.php controller looks like this:

<?php  if ( ! defined('BASEPATH')) exit('No direct script access allowed');

class Search extends Application
{
public function __construct()
{
parent::__construct();
$this->load->model('meta_model');
$this->load->helper('url');
$this->load->model('category_model');
$this->load->model('advert_model');
$this->load->helper('Fdate');
$this->load->helper('form');
$this->load->library('table');
$this->load->helper('advert');
$this->load->library('form_validation');
$this->load->helper('security');
$this->config->add_to_item(KCI_LANG, 'search');
 
      
     $this->load->library('pagination');

 
      $config['base_url'] = base_url();
      $config['total_rows'] = '50';
      $config['per_page'] = '30';
      $config['full_tag_open'] = '<p>';
      $config['full_tag_close'] = '</p>';
      $config['last_link'] = 'Last';
      $config['uri_segment'] = '4';
   
     $this->pagination->initialize($config); 

}

/**
 * Returns the search with based on the requested county.
 * If the county was recently visited, the municipality and locality aren't updated.
 * 
 * The primary search is also made to determine the latest search.
 *
 * @param unknown_type $slug
 */
public function index($county, $target = ADVERT_TARGET_ALL_SLUG, $sort = null, $type = null, $category = null, $municipality = null, $text = null)
{

$county = $this->meta_model->county(xss_clean($county));
if(!$county)
redirect('');
$this->load_banner(array($county->county_id,BANNER_SECTION_SEARCH));
if(!get_county() || get_county()->county_id != $county->county_id)
set_county($county);

$this->form_validation->set_rules('text', lang('advert_freetext'), 'max_length[100]');

$adverts = array();
$count = array();
if($this->form_validation->run())
{
$url = array();
$url[] = $county->county_slug;
$url[] = $this->input->post('advert_target') ? $this->input->post('advert_target') : ADVERT_TARGET_ALL_SLUG;
$url[] = $this->input->post('advert_sort') ? $this->input->post('advert_sort') : ADVERT_SORT_TIME;
$url[] = $this->input->post('advert_type') ? implode('-',$this->input->post('advert_type')) : ADVERT_TYPE_SALE;
$url[] = $this->input->post('category_id') ? $this->input->post('category_id', true) : 0;
$url[] = $this->input->post('municipality_id') ? $this->input->post('municipality_id', true) : 0;

if($this->input->post('text'))
$url[] = urlencode($this->input->post('text', true));

$slug = '/'.implode('/', $url);
redirect($slug);
}
else 
{
$params = array();

//Convert to objects
if($type)
{
$type = explode('-', xss_clean($type));
if($type)
{
$params['advert_type'] = $type;

foreach($type as $t)
populate('advert_type['.$t.']', true);
}
}
else 
{
$params['advert_type'] = array(ADVERT_TYPE_SALE);
populate('advert_type['.ADVERT_TYPE_SALE.']', true);
}


if($category)
$category = $this->category_model->get(xss_clean($category));
populate('category_id', $category ? $category->category_id : null);
$params['category_id'] = $category ? $category->category_id : null;

if($municipality == ADVERT_CODE_ENTIRE_COUNTY)
{
$params['county_id'] = $county->county_id;
populate('municipality_id', ADVERT_CODE_ENTIRE_COUNTY);
}
else if($municipality == ADVERT_CODE_ENTIRE_COUNTRY)
populate('municipality_id', ADVERT_CODE_ENTIRE_COUNTRY);
else if($municipality)
{
$municipality = $this->meta_model->municipality(xss_clean($municipality));
if($municipality)
{
$params['municipality_id'] = $municipality->municipality_id;
populate('municipality_id', $municipality->municipality_id);
}
}
else 
$params['county_id'] = $county->county_id;

if($target && $target != ADVERT_TARGET_ALL_SLUG)
{
$target = $this->advert_model->slug_target(xss_clean($target));
if($target)
{
populate('advert_target',  $target->target_slug);
$params['advert_target'] = $target->target_id;
}
}
else 
populate('advert_target', ADVERT_TARGET_ALL_SLUG);

$params['advert_sort'] = $sort ? $sort : ADVERT_SORT_TIME;
populate('advert_sort', $params['advert_sort']);
$params['text'] = $text ? xss_clean($text) : null;
populate('text', $text ? xss_clean($text) : null);

$adverts = $this->advert_model->search($params, $count);
}

$months = months();
$advert_types = $this->advert_model->types();
$municipalities = $this->meta_model->municipalities($county);
$categories = $this->category_model->all();
$this->_view('search_view', array(
  'months' => $months,
  'municipalities' => $municipalities, 
  'categories'=>$categories,
  'county' => $county,
  'adverts' => $adverts,
  'advert_types'=>$advert_types,
  'count' => $count));
}

/**
 * Returns the municipalities as JSON for a specified county
 * This is used by the AJAX request on the search filter
 *
 */
public function municipalities()
{
$result = array();
$county_id = $this->input->post('id', true);

if($county_id == 0)
{
$result['message'] = lang('ar_county_not_choosen');
set_county(null);
}
else 
{
$county = $this->meta_model->county_by_id($county_id);

if(!$county)
{
$result['error'] = lang('ar_county_not_found');
}
else 
{
set_county($county);

$result['county_name'] = utf8_encode($county->county_name);

foreach($this->meta_model->municipalities_for_json($county) as $municipality)
$result['municipalities'][] = array_map('utf8_encode', $municipality);
}
}

echo json_encode($result);
die();
}

/**
 * Returns the localities as JSON for a specified municipality
 * This is used by the AJAX request on the search filter
 *
 */
public function localities()
{
$result = array();
$municipality_id = $this->input->post('id', true);

if($municipality_id == 0)
{
$result['message'] = lang('ar_municipality_not_choosen');
set_municipality(null);
}
else 
{
$municipality = $this->meta_model->municipality($municipality_id);

if(!$municipality)
{
$result['error'] = lang('ar_municipality_not_found');
}
else 
{
set_municipality($municipality);

$result['municipality_name'] = utf8_encode($municipality->municipality_name);

foreach($this->meta_model->localities_for_json($municipality) as $locality)
$result['localities'][] = array_map('utf8_encode', $locality);
}
}

echo json_encode($result);
die();
}

/**
 * Updates the session container with the 
 * latest requested locality. Used by 
 * the AJAX request in the search filter
 * 
 *
 */
public function locality_set()
{
$locality_id = $this->input->post('id', true);

if($locality_id == 0 || !is_numeric($locality_id))
set_locality(null);

$locality = $this->meta_model->locality($locality_id);

if(!$locality)
set_locality(null);
else 
set_locality($locality);
}

/**
 * Updates the session container with the 
 * latest requested category. Used by 
 * the AJAX request in the search filter
 * 
 *
 */
public function category_set()
{
$category_id = $this->input->post('id', true);

if($category_id == 0 || !is_numeric($category_id))
set_category(null);

$category = $this->category_model->get($category_id);

if(!$category)
set_category(null);
else 
set_category($category);
}

/**
 * Lodge search that returns the info as JSON.
 * Used by the AJAX request in the search filter.
 *
 */
public function process_search()
{
$text = utf8_decode($this->input->post('text', true));
$offset = utf8_decode($this->input->post('offset', true));

if(!is_numeric($offset))
$offset = 0;

$result = array();
$result_count = 0;
$lodges = $this->lodge_model->search($text, 10, $offset, true, $result_count);

$result['result_count'] = $result_count;

foreach($lodges as $lodge)
{
$tmp = array_map('utf8_encode', get_object_vars($lodge));

foreach($this->lodge_model->facilities($lodge) as $facility)
$tmp['facilities'][] = array_map('utf8_encode', get_object_vars($facility));

foreach($this->lodge_model->distances($lodge) as $distance)
$tmp['distances'][] = array_map('utf8_encode', get_object_vars($distance));

foreach($this->lodge_model->prices($lodge) as $price)
$tmp['prices'][] = array_map('utf8_encode', get_object_vars($price));

$image = $this->lodge_model->image($lodge);
if($image)
$tmp['image'] = array_map('utf8_encode', get_object_vars($image));

$result['lodges'][] = $tmp;
}

echo json_encode($result);
}

}

and the model Meta_model:

<?php  if ( ! defined('BASEPATH')) exit('No direct script access allowed');


class Meta_model extends KCI_Model
{
public function counties_with_coordinates()
{
$this->db->join(TBL_COUNTY_COORDINATE, TBL_COUNTY_COORDINATE.'.county_id = '.TBL_COUNTY.'.county_id');
$this->db->order_by('map_index', 'ASC');
return $this->db->get(TBL_COUNTY)->result();
}

public function county($slug)
{
if(!$slug)
return false;

$this->db->where('county_slug', $slug);

$this->db->join(TBL_COUNTY_COORDINATE, TBL_COUNTY_COORDINATE.'.county_id = '.TBL_COUNTY.'.county_id');
return $this->db->get(TBL_COUNTY, 1)->row();

}
public function county_by_id($id)
{
$this->db->where('county_id', $id);
return $this->db->get(TBL_COUNTY, 1)->row();
}

public function county_by_lodge($lodge)
{
$this->db->where('lodge_id', $lodge->lodge_id);
$this->db->join(TBL_LOCALITY, TBL_LOCALITY.'.locality_id = '.TBL_LODGE.'.locality_id');
$this->db->join(TBL_MUNICIPALITY, TBL_MUNICIPALITY.'.municipality_id = '.TBL_LOCALITY.'.municipality_id');
$this->db->join(TBL_COUNTY, TBL_COUNTY.'.county_id = '.TBL_MUNICIPALITY.'.county_id');
$this->db->join(TBL_COUNTY_COORDINATE, TBL_COUNTY_COORDINATE.'.county_id = '.TBL_COUNTY.'.county_id');
return $this->db->get(TBL_LODGE, 1)->row();
}

public function municipality_by_lodge($lodge)
{
$this->db->where('lodge_id', $lodge->lodge_id);
$this->db->join(TBL_LOCALITY, TBL_LOCALITY.'.locality_id = '.TBL_LODGE.'.locality_id');
$this->db->join(TBL_MUNICIPALITY, TBL_MUNICIPALITY.'.municipality_id = '.TBL_LOCALITY.'.municipality_id');
return $this->db->get(TBL_LODGE, 1)->row();
}

public function locality_by_lodge($lodge)
{
$this->db->where('lodge_id', $lodge->lodge_id);
$this->db->join(TBL_LOCALITY, TBL_LOCALITY.'.locality_id = '.TBL_LODGE.'.locality_id');
return $this->db->get(TBL_LODGE, 1)->row();
}

public function municipalities_for_json($county = null)
{
if($county)
$this->db->where('county_id', $county->county_id);

$this->db->select('municipality_id, municipality_name');
$this->db->order_by('municipality_name', 'ASC');

return $this->db->get(TBL_MUNICIPALITY)->result_array();
}

public function municipalities($county = null)
{
if(is_numeric($county))
$this->db->where('county_id', $county);
elseif($county)
$this->db->where('county_id', $county->county_id);

$this->db->order_by('municipality_name', 'ASC');

return $this->db->get(TBL_MUNICIPALITY)->result();
}

public function municipality($id)
{
$this->db->where('municipality_id', $id);
return $this->db->get(TBL_MUNICIPALITY, 1)->row();
}

public function localities_for_json($municipality = null)
{
if($municipality)
$this->db->where('municipality_id', $municipality->municipality_id);

$this->db->where('locality_type', 'T');
$this->db->select('locality_id, locality_name');
$this->db->order_by('locality_name', 'ASC');

return $this->db->get(TBL_LOCALITY)->result_array();
}

public function localities($municipality = null)
{
if($municipality)
$this->db->where('municipality_id', $municipality->municipality_id);

$this->db->where('locality_type', 'T');
$this->db->order_by('locality_name', 'ASC');

return $this->db->get(TBL_LOCALITY)->result();
}

public function locality($id)
{
$this->db->where('locality_id', $id);
$this->db->where('locality_type', 'T');
$this->db->order_by('locality_name', 'ASC');

return $this->db->get(TBL_LOCALITY, 1)->row();
}

public function locality_parameters_by_municipality($municipality)
{
$this->db->where('municipality_id', $municipality->municipality_id);
$this->db->select('locality_id');
$municipalities = $this->db->get(TBL_LOCALITY)->result();
$result = array();

if($municipalities)
foreach($municipalities as $municipality)
$result[] = $municipality->municipality_id;

return $result;
}
}

hello....   I am a  new bee to PHP...can any one please let me know...why OOPs PHP...what make difference...between procedural(Generic) PHP  and OOPs PHP...if possible provide me any referal links...   and i have gone through Codeigniter user guide....it was quite good...but can any one let me know how to develop an entire web-application...in Codeigniter....if possible provide me any referal links...     Thanks & Regards Shankaar

Hi,     any body can help, i got 404 message and i dont know the exact way on how to resolve it.   i have url login page like this :

http://localhost/prok/run32.php 

 and now if the user get correct username and password, page will load or redirect in this but in this link i get 404 message

http://localhost/prok/index.php/dashboard/catalog

please take a look my way of coding.

#routes.php

$route['default_controller'] = 'Login';
$route['404_override'] = '';
$route['dashboard/(:any)'] = 'dashboard/Catalog';

#controllers/login.php

<?php 
	if ( ! defined('BASEPATH')) exit('No direct script access allowed');

		class Login extends CI_Controller 
			{

				function __construct()
					{
						parent::__construct();
						$this->load->helper('url');
					}
				public function index()
				{
					$this->load->view('login');
					
								$array = array();
								
										
								if(isset($_POST['submit']))
									{	
										$username = $this->security->xss_clean($this->input->post('username'));
										$password = $this->security->xss_clean($this->input->post('password'));
										
										if(empty($username))
											{ 
												$array[] = "<p>Please fill-in required field!</p>"; 
											}
										else 
											{ 
												$username = mysql_real_escape_string($username);
											}
										if(empty($password))
												{ 
													$array[] = "<p>Please fill-in required field!</p>";
												}
											else 
												{ 
													$password = mysql_real_escape_string($password);
												}
												if(sizeof($array) > 0)
													{
														foreach($array as $val);
															{ echo "<p>$val</p>";
															}
													}
											else
												{ 
													$this->load->model('login_process');
													$result = $this->login_process->validated();
												if(!$result)
													{
														echo "<p> Invalid usernamessssss and password.</p><br />";
													}
												else
													{
														#$this->load->view('dashboard/catalog','refresh');
														redirect('dashboard/catalog','refresh');
													}
												}
									}
				}
			}

#controllers/dashboard/catalog.php

<?php 
	if ( ! defined('BASEPATH')) exit('No direct script access allowed');

		class Catalog extends CI_Controller 
			{
				public function index()
					{
							$this->load->view('dashboard/catalog');
							
					}

			}

please advise, what im doing wrong.     Thanks advance

Hi all Its my first project in CodeIgniter and I tried to make it live from local   Issue is, In local server, site URI is running without index.php, but live it is giving error.   e.g http://localhost/ci_basic/site/about   folder name -  ci_basic Controller name - site Function name - about   In .htaccess file   RewriteEngine On
RewriteBase /ci_basic/   Now i uploaded the file in a folder named - chikabana ( folder in my root directory assigned to the chikabana.com )   In .htaccess file   RewriteEngine On
RewriteBase /chikabana/   I also changed the base url to - chikabana.com in config file and also removed index.php from config file.   But this URL not working - http://chikabana.com/site/about   this is working - http://chikabana.com....php/site/about       Also my second question is  - how i remove the controller name from url?  

Hi - My app is built with Codeigniter and so if I turn on CSRF on CI inside the config I get the token being created on my page - good.    But I have 1 page ( "shopping cart") which uses Scriptaculous Ajax.Updater function :  http://api.prototype...x/Ajax/Updater/   When I turn on CSRF my shopping cart page refuses to function in terms of updating the cart or deleting any items from the cart. These are both js functions.   I am really stuck - any help would be a God send. Thank You !!    Here is the code:    UpDate JS Function: 

function jsUpdateCart(){
  var parameter_string = '';
  allNodes = document.getElementsByClassName("process");
  for(i = 0; i < allNodes.length; i++) {
  	var tempid = allNodes[i].id;
    var temp = new Array;
    temp = tempid.split("_");
 	var real_id = temp[2];
 	var real_value = allNodes[i].value;
    parameter_string += real_id +':'+real_value+',';
  }

  var params = 'ids='+parameter_string;
  var ajax = new Ajax.Updater(
    'ajax_msg','http://localhost/mysite/index.php/welcome/ajax_cart', {method:'post',parameters:params,onComplete:showMessage}
    );

}

   

Hi coders,   code below are running good, but my problem is i did not get the line echo $row->pof_num + 1; into view "generate_po.php".   since i want that line to get the value and put into input text like below. how and kindly assist.

<input type = "text" name = "num" value = "<?php echo $row->pof_num + 1; ?>">

		public function generate_po()
			{
				$po_id = $this->input->post('selector');
				
				$data['result'] =  $this->public_base_model->generate_po($po_id);
		
					if($this->session->userdata('logged_in'))
						{
						  $session_data = $this->session->userdata('logged_in');
							$data['username'] = $session_data['username'];
								$data['fname'] = $session_data['fname'];
									$data['userid'] = $session_data['userid'];
										$this->load->view('generate_po', $data,$this->get_max());
						}
					else
						{
						 $this->load->view('login');
						}
			}
		public function get_max()
			{
				$query2 = $this->db->query("SELECT pof_num FROM pull_out where pof_num = '8800000582'");

				$row = $query2->row();
				
					echo $row->pof_num + 1; // i want this line to put into view.
					
				$query2->free_result();			
					
			}

I'm a bit new to PHP and I'm getting my feet wet with mvc with code igniter. I'm having a bit of trouble with my view accessing a function from my controller. If anyone has seen CodeIgniter from Scratch Day 4, it's that tutorial - i've created an email newsletter signup.   In my my view (newsletter.php), my submit button is not working and isn't able to access a function from my controller (email.php). The inaccessible function is called function send(). Instead, I get a 404 error. I'll post the code from both the view and controller, but I highly suspect the error is contained within the view because my controller loads the view, but my view can't call a function from the controller. Any help you can provide would be greatly appreciated. Thanks.   Here's the code from my view (newsletter.php):   <html lang='en'>

This topic has been moved to mod_rewrite.

http://www.phpfreaks.com/forums/index.php?topic=355043.0

Can you please help how to validate the date of birth in code igniter including leap years 

Hello,   Can you guys point me to something where I can follow some tutorial or something and learning CI?  I've already made tons of 'Cars' models... 'Dogs' .. 'Cats'.. etc but I really need some project where I can follow steps to creat and learn while I create.    p.s. I think I post this thread in right place but please correct me if is wrong.   Thank's!

Hi, I'm trying to query my database using codeigniter's active record class. I have a number of blog posts stored in a table. The query is for a search function, which will pull out all the posts that have certain categories assigned to them. So the 'category' column of the table will have a list of all the categories for that post in no particular order, separated by commas, like so: Politics,History,Sociology.. etc.

If a user selects, say, Politics and History, The titles of all the posts that have BOTH these categories should be returned.

Right? So, the list of categories queried will be the array $cats. I thought this would work-

                foreach ($cats as $cat){
                    $this->db->like('categories',$cat);
                }

By Producing this-

$this->db->like('categories','Politics'); $this->db->like('categories','History');

(Which would produce- 'WHERE categories LIKE '%Politics%' AND categories LIKE '%History%')

But it doesn't work, it seems to only produce the first statement. The problem I guess is that the column name is the same for each of the chained queries. There doesn't seem to be anything in the CI user guide about this (http://codeigniter.com/user_guide/database/active_record.html) as they seem to assume that each chained statement is going to be for a different column name. Of course it is not possible to use an associative array in one statement as it would have to contain duplicate keys- in this case every key would have to be 'categories'... Does anyone know how I could do this?

Thanks!

As a long time CodeIgniter user, I made the decision to move away from CodeIgniter a while back. I still maintain, and in some cases develop new features for websites that I made using CodeIgniter.   Still somewhat active in the CodeIgniter forum, I have seen a recent question, "How do we get CodeIgniter back to the PHP framework of choice?". I have offered my own criticism of the framework, but the thread is located on the CodeIgniter forum, so many just protect their beloved CI, not willing to accept that it is in great need of change.   I would appreciate if phpfreaks members would be critical, and hopefully specific in regards to CodeIgniter's problems. I intend to link to this thread, with the hopes that your opinions will help future development of CodeIgniter. Thank you.