Basic PHP system with user control

PHP
1

I am trying to find simple PHP system that would have user control for multiple roles, would be easy to modify/change to suit needs but providing good security level.

Been looking around but nothing specific has been found yet. Ideally PHP 7 but 5.2+ considered too.

So in short spec:
PHP 5.2+
MySQL DB
User roles (min 3)
Easy to modify
Good documentation

Any thoughts? Got codeigniter on the list but it requires quite a bit of work, was thinking if there is something more suitable.

2

Seriously, donā€™t even consider anything less than 5.6. 5.5 hasnā€™t been supported for over 2 years. Stick to version 7 and up.

3 Likes
3

Well then it makes even shorter list of such systems/frames?

4

I guess so, but you donā€™t want ones that have built-in security issues, do you?

5

True, but this system would not be used in public, only for internal use. Surely, latest version would make it last longer and as far as I know work faster/more efficient.

So, any examples?

6

Use laravel Framework !

7

Any more details why please?

8

You first because it is very unclear what you are asking for. You mentioned CodeIgniter as a possible candidate but thatā€™s a framework, not a ā€œsystemā€. Plus there are at least three distinct versions of CodeIgniter out there.

You brought up php version but I have no idea where that fits in. Especially since support for all versions of php 5 will end in a few months.

Symfony has a powerful component that supports users and roles. Maybe that is what you are asking for. Maybe not.

2 Likes
9

I get that you are looking for some kind of ā€œdrop inā€ role addon. What I do not know is what abilities and limitations the different roles would have.

For example:

  • can SELECT from database tables but not UPDATE
  • can read some pages but not others
  • can submit text content but not publish it

etc. I think if you put together a rough outline of what youā€™re after for the various roles it would be a big help to others in coming up with possible options.

1 Like
10

Seems that you know the right direction.

At the moment I am not sure yet of how to handle permissions. Each user would have certain pages allowed, but not everyone the same. I.e. if you are mechanic role user, you donā€™t need access to marketing. But marketing should be split into view & view+edit levels.

Hope this makes sense? To make it simple, Iā€™m thinking of having single (or couple) ā€œeditā€ buttons per page so thereā€™s less code to load for checking permissions (in comparison of giving ability to edit only certain lines of the list which would increase the length of the code significantly, I think, am I wrong?)

So I think each userā€™s table would contain column for page permission - i.e. if column ā€œSales_pageā€ has 0 - user cannot see the page, 1 - user can view only, 2 - user has rights to edit. It sounds quite simple, but it needs to be relatively safe & secure, hence Iā€™m asking for system/frame which would be efficient in such way.

11

All I could think of is forum, CMS, frameworks etc. that had RBAC (Role Based Access Control) as a part of the whole and not anything that could easily be used separately. Yet I had the feeling that there must be something out there somewhere. So I searched.

I found:

But unless Iā€™m missing something these too are part of a whole.

Iā€™m thinking that instead of analyzing or scavenging existing code it might be easier to write your own. This SitePoint article looks like a good place to start.

12

Thanks, Iā€™ll have a look at those sites.

As for writing on my own, I do not have such skills yet & concerned it would be ā€˜safe enoughā€™.

13

This topic was automatically closed 91 days after the last reply. New replies are no longer allowed.