UBB.Developers Forums UBB.threads 7 Development How Do I? Using boards auth mech

I am making a few other pages on our web site that I only want to provided certain people access to. I figured since everyone already has a board login I might just be able to use that and authenticate people based on if they have certain access on the boards.

Instead of going through a wild goose chase through all the files I was wondering if this functionality exists or maybe just give me the specific files/functions to look at.

Thanks in advance.

gonna quote scream here..

[]Ok, the authenticate call is pretty basic. There are a few ways to call it and it takes 3 things, Username, Password and Query. If you were trying to plug it into another script you would need to do something like this:

---------------------------------------
require ("main.inc.php");
$userob = new user;

$user = $userob -> authenticate("$Username","$Password","");
---------------------------------------

Notice that I didn't send anything for the query. When you call it like this it returns every field from the user table. If you only wanted their U_Homepage field then you would call it like this:

$user = $userob -> authenticate("$Username","$Password","U_Homepage");

There is one catch to this. Even though only one field is specified, authenticate will always return a few other fields: U_StyleSheet, U_Status, U_Privates and U_FrontPage. It does this because these are needed by pretty much every script in UBBThreads and I didn't want to have to put these into the query each time.

Ok, so once you call authenticate, any fields you requested are going to be in the $user array. In the example above where U_Homepage was requested you could find out the value of their homepage by doing something like this:

$homepage = $user['U_Homepage'];

or

echo "{$user['U_Homepage']}";

That's the basic rundown on the authenticate function. If anyone needs more specifics on it, just let me know. [/]

Not sure how secure you need it to be but a quick simple way to do this would be to use the Generic Threads Page mod and only apply the menu items in the registerednav.tmpl

Awesome... thanks for the quick response, just what I was looking for..

Is there also an easy way to find out which specific formuns/groups they have access to?

Actually now that I think about it, I can have the users just login through the boards first and then hit the page.

Is there something that I can use to check their session. Bascially, since they are already auth through the board.

for anyone interested where is what I found based on my last few questions.


and then you have access to all the above variables in your code.

Are you looking to limit people based on what group they are in?

If so, post and reply, I already have that built and all you need to do is reference the Group_ID they are in...and boom, you are up and running.

Medar,

I would like to see what you have built for that.

I use the Generic Threads Page that Josh wrote up, but you can actually put this in anywhere you auth (as everyone listed above).

My snippet is bolded, the rest is (I believe) standard out of Josh's Generic Threads Page. The only thing you need to do is put the correct group number (mine is -6- below) into the snippet of code, and change your NOT_RIGHT message.
__________________________________________

<?
// Generic UBB.Threads page by Joshua Pettit
// aka JoshPet of www.joshuapettit.com
// UBB.Threads Elements ©Infopop.com and Rick Baker

// Variables - Edit these As Needed

// What is the title of the page:
$pagetitle = "Add your Page Title";

// What is the PATH (not URL) to your threads install?
// You'll find this in your threads config file
// Do not include trailing slash
$threadspath = "/home/path/forums";

// DO NOT EDIT THIS SECTION
// Require the library
require ("$threadspath/main.inc.php");

$userob = new user;
$user = $userob -> authenticate(U_Groups);
$html = new html;
$html -> send_header($pagetitle,$Cat,0,$user);

// -----------------------------
// Make sure they should be on this page
if (!stristr($user['U_Groups'],"-6-")) {
$html -> not_right ("<br><B>You must be a member of the Moderation group to access this function.</b>",$Cat);
}

// ---------------------
// Grab the tablewrapper
list($tbopen,$tbclose) = $html -> table_wrapper();
// Now let's draw the table
echo "$tbopen";
// Now let's create a header with the page title in it
echo "<tr><td class="tdheader">$pagetitle</td></tr>";
// Now let's open the next table cell for the body of your page:
echo "<tr><td class="lighttable">";
// The rest of the page

// YOU CAN EDIT THIS SECTION
// Put the HTML of your page below this
__________________________________________

I used:

That works too