Good way to check if user is connected to the Manager

153 Posts

neoziox Reply #1, 10 years, 3 months ago

Hi!

I want to display on the website some informations only for the user who is logged in the Manager. To do this, I use this code:

if ($modx->isFrontend() && isset ($_SESSION['mgrValidated'])) {
	// Something here
}

It works perfectly but I want to know if this method is a good and secure way.
Thanks.

This question has been answered by fourroses666. See the first response.

discuss.answer

1,613 Posts

fourroses666 Reply #2, 10 years, 3 months ago

I don't know about safety so can't give the answer

I've used this snippet;
When your website is live and you want to do corrections or whatever which are only visible for manager logged-in users, you can use this snippet:

Snippet name: loggedOnly

<?php
// [!loggedOnly?private=`--only visible when logged in--` &public=`--visible--`!]
     
    $output = '';
    $private = isset( $private ) ? $private : $output;
    $public = isset( $public ) ? $public : $output;
 
    if (!isset($_SESSION['mgrInternalKey'])) {
        $output = $public;
    }
    else {
        $output = $private;
    }
    return $output;
?>

Evolution user, I like the back-end speed and simplicity

153 Posts

neoziox Reply #3, 10 years, 3 months ago

Thanks fourroses666

118 Posts

chris.dempsey78 Reply #4, 8 years ago

This snippet from Mark Hamstra may also be of use for anyone wanting to achieve similar.

if ($modx->user instanceof modUser) {
  if ($modx->user->hasSessionContext('mgr')) { 
    return true;
  }
}
return false;

https://www.markhamstra.com/modx/2012/01/hiding-google-analytics-code-from-manager-users/

Answered Good way to check if user is connected to the Manager