User identity, access SESSION in php

[famousmag]

Hello All,

I’m trying for a long time now to build a cms handling users/roles/pages etc…

I thing I am on a very good stage and I have managed to finally do it but now I am on the stage to restrict page access/permissions based on users roles.
This brought me back a few steps back because I have to build in php all the needed SC I have already made.
Again, that’s fine but I am stuck on zero point because I can’t retrieve the user ID…
I have tried already:

• security provider name “scname”.
• <?php echo $_SESSION['scnameId'] ?>

Not working… Getting:
Notice : Undefined variable: _SESSION in xxxxxxxxxxxx\index.php on line 49
Notice : Trying to access array offset on value of type null in xxxxxxxxxxx\index.php on line 49

I cannot figure what I am doing wrong…
Please, somebody have a suggestion?

Thanks in advance

Wappler 5.5.1
PHP, mySQL

[Mozzi]

Maybe this will help you.

Setting up Site Security Settings

Using the Security Provider you can define the security settings for the whole project and reuse them on all of your pages. We will go through each of the available options - from single user to database users and explain how to set them up. Setting Up Security Provider The Security Settings you create are globally available for all your server actions across your project. You need to setup your Security Provider once, and then you can reuse it in all the steps which require any kind of secur…

and

Using Globals in Server Connect

Intro The Globals allow you to define and re-use Database Connections and other Settings (1), Variables / Input Parameters (2) and API Action Steps (3) across all your API Actions in the project: [Screenshot_2] Whenever you need a Database Connection, Mailer or Security Provider you just need to define them once in the Globals and they will be available for all your Server Actions in the project. Defining Global Variables / Input Parameters You can easily define a variable and access it f…

and instead of using * <?php echo $_SESSION['scnameId'] ?> use the Security Identity via server connect.

[famousmag]

Thanks @Mozzi for replying.

I have successfully accomplished all these steps and procedures…

I am talking on accessing user ID and building server actions (queries,checks and outputs) on server side (php , pdo() )

[Teodor]

Well just add the identity step in the globals and it will be accessible in the data picker in all your server actions.

[famousmag]

Dear @Teodor,

I am talking about server side coding…
Line number 1 in my page

[Teodor]

Server side coding in Wappler is happening in the Server Connect panel. You don’t need to use php code on your pages.

[famousmag]

I am talking about something similar…

PDO connection if you prefer not to use a prerender service

I decided for my newly created Africa Collection site that I would rather get the meta tags and other SEO tags filled with my own PDO connection because certain social media platforms and schema providers can not parse the javascript and just read the page source before it is rendered. I have in the past used services from StackPath and prerender.io to produce similar results however this site changes pretty often, and the prerender indexing speed could become an issue for my client. I needed …

Am I wrong?

[Teodor]

What are you trying to achieve exactly that is not possible with the server side tools in Wappler, that requires php coding on the pages?

[famousmag]

Every page will be rendered If a user has access to this page…

[Teodor]

And this is already possible using security provider and security provider enforcer within Wappler.

[famousmag]

dear @Teodor please understand me… Then I should give wappler to the administrators of the site and give them lesson on how to use it…

[Teodor]

@famousmag

I should give wappler to the administrators of the site and give them lesson on how to use it

Not sure i understand what you mean by this.

When building a site with Wappler you can simply use the security provider enforcer which places the required code on your page to restrict access and not render the content to not authorized users.

Why are you using Wappler at all in case you want to hand code your site?

[famousmag]

OK brother, thanks for your time.
I will restrict page permissions by security provider enforcer panel.

By the way, in case I need it, how can I access the user ID in server side? Is there a way?

[Teodor]

Logged User Session Name

When you setup a log in system, a session is being created by the log in script and it contains the logged user identity. This session and its value can be accessed by any other script by calling it (in your scripts). The name of session storing logged in user identity depends on your security provider name. It’s name is: securityProviderName + Id so if your security provider is called siteSecurity like here: [Screenshot_65] Then the session name will be: siteSecurityId So, for example in …

[famousmag]

Thanks again but as I already have mension it is not woking for me…
Anyway, I may have to search somewhere else to find the answer

[Teodor]

@famousmag

Not working… Getting:
Notice : Undefined variable: _SESSION in xxxxxxxxxxxx\index.php on line 49
Notice : Trying to access array offset on value of type null in xxxxxxxxxxx\index.php on line 49

It is not working as you didn’t include

<?php
    session_start();
?>

on your page.
Again, it would save you all of these issues if you use the components in Wappler and not hand-coding it. that’s the idea of using Wappler.

[famousmag]

THANK YOU BROTHER!!!

And I thank you for two reasons…

1. You solved the reason that my initial thread was about - session_start() was missing.
   It didn’t work anyway because when I included session_start() I got a:
   Notice : Undefined index: scnameId
   (Maybe because I used an example provider name in my thread “scname”, the actual name is “sc_name”. This underscore symbol maybe?)

2. Your insistence pointed me to the right direction, no hard coding…
   And this direction came up from this post of yours:
   Wappler Documentation - Show or Hide Elements Conditionally
   I will set a variable to “hide”. I will hide all of my content in the main div and set it as conditional region, its condition will be my variable == “show”.
   Now, on my original SC I added a success event that a) set variable=“show” b) if SC gives permission a browser.goto (same page) but ticked internal otherwise browser.goto(login or index)

I hope I can make it happen (without hard-coding thanks to you).

Chears