[Snippet] Two manager authentication snippets

I have been working on a couple of snippets that work together to let you login to the manager without leaving the frontend of the site. They are mostly meant for use with the frontend editing hack.

The first is the actual login snippet and the second is a simple dynamic login/logout link that will either send you to the login page or log you out immediately. The LoginLogoutLink is of course not required to use ManagerLogin.

Give ’em a look and let me know what you think.

Note: The login form does not support Captcha codes. Also, for the LoginLogoutLink, make sure that you copy the properties from the comments into the properties field. You will also have to give the LoginLogoutLink snippet the document id of the login page via the login_doc_id variable.

Examples:
[[ManagerLogin]]
[[LoginLogoutLink?login_doc_id=1]]

Hi aNoble !

Thanks for cool snippets

Best regards,

zi

Nice work wil implemenrt them on my modx test site

Sorry to ask before installing, but does this support immediate redirection to site-start? Having a publicly published login to the manager could be considered a security risk by some.

Quote from: rthrash at Aug 24, 2005, 10:13 AM

Sorry to ask before installing, but does this support immediate redirection to site-start?

Right now it will just keep you no the same page but having it throw you out to some page or anther is a good idea, I’ll see if I can iplement that. I’m thinking it could spit you out either to the site_start, the referrer (if internal), or just choose the page.

Quote from: rthrash at Aug 24, 2005, 10:13 AM

Having a publicly published login to the manager could be considered a security risk by some.

I can understand that to a certain extent but it’s a snippet. So if you don’t like it, don’t use it

Plus you could easily hide it from the menu and make it non-searchable so that people would have to go directly to /login the way they go directly to /manager now. Plus this is almost an exact clone of the login processor file blocking and other security measures are still in place. I haven’t incorporated captcha codes but I will if anyone wants it.

Now that I think of it, Captcha would probably be a good candidate for a plugin. Does anyone really use it? It’s a great security feature and I think it should be available but does it really belong in the core?

Now that I think of it, Captcha would probably be a good candidate for a plugin. Does anyone really use it? It’s a great security feature and I think it should be available but does it really belong in the core?

Good idea... that makes sense and is an area that could be re-used in multiple places... like for preventing comment spam on comments.

Quote from: rthrash at Aug 24, 2005, 11:56 AM

Now that I think of it, Captcha would probably be a good candidate for a plugin. Does anyone really use it? It’s a great security feature and I think it should be available but does it really belong in the core?

Good idea... that makes sense and is an area that could be re-used in multiple places... like for preventing comment spam on comments.

Or not...

http://www.videolan.org/pwntcha/

OOPS !

We are developing and they are destroying !

Quote from: sottwell at Aug 24, 2005, 01:13 PM

Or not...

http://www.videolan.org/pwntcha/

More reason to get it out of the core, right I thougt the image idea was pretty good though.

yeah... pretty cool except for non-english speaking individuals:

Abejorros ... no bees
Lagartija ... no salamander
Zanahorias ... no carrots
Fresas ... no strawberries
Estrellas ... no stars


(sometimes it pays to have a 22 month old and bilingual childrens’ board books laying around... Carter’s favorite is Salamander: "Teeha!" lol )