sentinel

  • Sentinel::RegisterAndActivate() //Register the $request user and activate if(Sentinel::registerAndActivate($request->All())){ //Search the new registered user $user = User::whereEmail($request->get(’email’))->firstOrFail(); //Bind the user to Activation Table $activation=Activation::create($userSentinel); //Assign A Profile To The New Registered User $userProfile = new Profile(); $userProfile->user_id = $user->id; $userProfile->smoked = $request->smoked; $userProfile->lat = 0.0; $userProfile->lng = 0.0; $user->profile()->save($userProfile); //Find role $role=Sentinel::findRoleBySlug(‘member’)->firstOrFail(); //Attach the user to…

    Baca catatan

  • Middleware is a class that have special function in Laravel. Middleware placed in between the User and  Apps.  Before you can access the Apps, Middleware will do his job first. We can use Middleware to do several thing Do you authenticated? What is your role? Do you authorized? Can you perform this action? etc class MemberMiddleware…

    Baca catatan

  • This is examples how Laravels handle exceptions. try{ .. .. Business Logic .. .. } catch(ThrottlingException $e){ $delay = $e->getDelay(); return redirect()->response->withErrors(“You are banned for $delay seconds.”); } catch(NotActivatedException $e){ return redirect()->response->withErrors(“You account is not activated.”); } Not to forget at the top of the class use Cartalyst\Sentinel\Checkpoints\ThrottlingException; use Cartalyst\Sentinel\Checkpoints\NotActivatedException;

    Baca catatan

  • In terms of security, it is not wise to use GET method to logout from your applications. To make more secure, use POST method. <li> <a href=”{{ url(‘/logout’) }}” onclick=”event.preventDefault(); document.getElementById(‘logout-form’).submit();”> Logout </a> <form id=”logout-form” action=”{{ url(‘/logout’) }}” method=”POST” style=”display: none;”> {{ csrf_field() }} </form> </li> In your controller public function logout() { if(Sentinel::logout()){ return…

    Baca catatan