user login and profile management

Modx Revolution 2.07
Godaddy server w/ Apache, php and mysql
Install is running fine

Greetings,

I’m currently trying to figure out a way to have a user login and profile section for my website. I would then like to have users from another "super user" group be allowed to alter the information of the first user group. If you have any directions you can point me in I’d appreciate it

Here is the specifics for my needs

1. login form
2. registration form with the following

• name
  email
  phone#
  alt phone#
  password
  confirm password

3. A credit card info form (only storing the info not processing)

• name on card
  Billing address
  card type
  card #
  ccv#

4. Information on all users search-able by second user group with the ability to add the following information to the user info

• project
  project time line
  representative
  notes

Now I’ve tried various methods of getting this to work using the login package but with no luck. Is the login package a feasable solution? or do I need to go in a different direction? If so,.. any suggestions?

Any help would be greatly appreciated.

You should be able to do that with Login and a ’super user group’ - you’re on the right track.

Have you tried following these tutorials:

• Making Member-Only Pages
• Creating a Second Super Admin User

Also, your requirement to hold credit card details set off a few alarm bells - do you know about PCI compliance? If your database gets compromised you could end up with some major problems. I would definitely speak to your web host about that first. Do you really need to store c/c details, especially if you are not going to process them?

Quote from: lucas at Mar 28, 2011, 01:21 PM

You should be able to do that with Login and a ’super user group’ - you’re on the right track.

Have you tried following these tutorials:

• Making Member-Only Pages
• Creating a Second Super Admin User

Also, your requirement to hold credit card details set off a few alarm bells - do you know about PCI compliance? If your database gets compromised you could end up with some major problems. I would definitely speak to your web host about that first. Do you really need to store c/c details, especially if you are not going to process them?

Hi Lucas, I appreciate the response. I have examined the "making members only pages" (very helpful). I haven’t tried the "creating a Second Super Group" one though. Thanks for pointing me to it. I really try to read up on anything I have a question about before posting it here.
I agree with the alarms about the CC information. A hack would be completely devastating. I will look for another solution for this. Thanks for the reply, I’ll let you know how it goes and the solution I come up with.

No problem, good luck with it and if you get stuck just post something back here