SnippetsUsing a Password Validator

18 October 2010 | Aram Balakjian | Security, Forms, Login

5 4

The Password Validator allows you to set particular criteria for your members passwords. For example if you wanted to have a minimum length of 8 characters and contain lowercase and uppercase characters, well that's a simple case of adding a couple of lines to your _config.php file!

SnippetsSet the Redirect after a successful Member Login

31 May 2010 | dalesaurus | Security, Forms, Member | Supports v2.4, v2.3

4 8

The Member system that comes with SilverStripe offers substantial control over your site's authentication capabilities. It often requires the developer to build out or extend most common functionality to websites. This is great in that you are never "stuck" with the out-of-the-box offerings, but as any SS dev knows you end up with a little bag of Member tricks that gets used across many projects. Presented here is one that I use often.

SnippetsPreventing malicious SQL injections

12 March 2010 | Daniel Hensby | Security, DataObjects, Database | Supports v2.4, v2.3

3 6

PHP has a very shallow learning curve, it's free and anyone can have a go at making a website by following a few tutorials and implementing their experience with other languages. However, coding for the web can be a risky business, especially with dynamic websites that take some kind of user (or external) input and use that to get data from a database.

SnippetsHide pages in Sitetree that a user can't edit

15 September 2009 | Howard Grigg | CMS, Security, Site Tree, Member | Supports v2.4, v2.3

0 2

SnippetsHow to access your admin account when you've forgotten the password

22 August 2009 | dalesaurus | Security, Member, Login

2 1

SnippetsRemoving an Item From the Main CMS Menu

3 July 2009 | Aram Balakjian | CMS, Security

4 0

If you want to remove an item from the CMSTopMenu without making it inaccessible you can add this line to your _config.php file:

CMSMenu::remove_menu_item('SecurityAdmin');

SnippetsUsing canCreate(), canEdit(), canDelete() and canPublish() to manage page type permissions

23 June 2009 | Aram Balakjian | Security | Supports v2.4, v2.3

2 2

Often you will want to control which users can create, edit, delete and publish certain page types. For example you may only want high level users to be able to create ContactPage page types, or prevent low level users from deleting HomePage page types. This can easily be achieved by adding these functions to the page type model (usually just before getCMSFields()). Then within the function you can define conditionals which decide whether to return true or false.