close ad
Install the LAtest Updates to Work with CC 2017 and CC 2018
open ad
View Menu

Technical Support Forums

Free, outstanding support from WebAssist and your colleagues

rating

Restrict Access/Grant Access for members Security Assist

Thread began 8/13/2013 8:08 pm by eric284736 | Last modified 8/14/2013 8:02 pm by eric284736 | 225 views | 2 replies |

eric284736

Restrict Access/Grant Access for members Security Assist

Hi Jason,

I have a membership setup where the RegType is a session. So it works like this:
1 = a basic free membership
2, 3 or 4 would be a paying membership (2 months, 6 months, yearly)

I have access rules setup for basic access and for paid access so if the page is premium content the free member would get redirected to an upgrade membership page.

This is the setup on the helpergrouprulesphp.php page:

case "Logged In FREE Member":
$comparisons[0] = array(TRUE, "".((isset($_SESSION['SecurityAssist_MemberID']))?$_SESSION['SecurityAssist_MemberID']:"") ."", 2, "");
$comparisons[1] = array(TRUE, "".((isset($_SESSION['RegType']))?$_SESSION['RegType']:"") ."", 1, "1");
$comparisons[2] = array(TRUE, "".((isset($_SESSION['AdminAccess']))?$_SESSION['AdminAccess']:"") ."", 1, "1");
break;
case "Logged in to Pay Members":
$comparisons[0] = array(TRUE, "".((isset($_SESSION['SecurityAssist_MemberID']))?$_SESSION['SecurityAssist_MemberID']:"") ."", 2, "");
$comparisons[1] = array(FALSE, "".((isset($_SESSION['RegType']))?$_SESSION['RegType']:"") ."", 4, "1");
$comparisons[2] = array(TRUE, "".((isset($_SESSION['RegType']))?$_SESSION['RegType']:"") ."", 6, "2");
$comparisons[3] = array(TRUE, "".((isset($_SESSION['AdminAccess']))?$_SESSION['AdminAccess']:"") ."", 1, "1");
break;

My problem using a basic free membership with the RegType of 1 still allows me to access the premium page. What am I doing wrong? :)

thx
Eric

Sign in to reply to this post

Jason ByrnesWebAssist

when using multiple conditions in an access rule, the first condition that it comes to that passes will cause the rule to pass.

IT's not a matter of each rule being separated by AND or OR.

in each rule, the first condition is:

Allow If $_SESSION['SecurityAssist_MemberID'] NOT Equal "" (in other words, Empty)

so if the SecurityAssist_MemberID session has a value, the rule will pass since it knows to allow in that case. it does not process the other conditions.

your login page should be set to set the SecurityAssist_MemberID and RegType sessions when the login happens, in other words, the RegType session should not be able to have a value without the SecurityAssist_MemberID session also having a vaue. So in reality, both checks arent needed.

you really only need the condition for
Allow If RegType = 1

you dont really need the first condition.

but if you want to double check the SecurityAssist_MemberID, use the condition:
Restrict IF $_SESSION['SecurityAssist_MemberID'] EQUALS ""

Sign in to reply to this post

eric284736

Got it. Thanks Jason!!

Sign in to reply to this post

Build websites with a little help from your friends

Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.

Build websites from already-built web applications

These out-of-the-box solutions provide you proven, tested applications that can be up and running now.  Build a store, a gallery, or a web-based email solution.

Want your website pre-built and hosted?

Close Windowclose

Rate your experience or provide feedback on this page

Account or customer service questions?
Please user our contact form.

Need technical support?
Please visit support to ask a question

Content

rating

Layout

rating

Ease of use

rating

security code refresh image

We do not respond to comments submitted from this page directly, but we do read and analyze any feedback and will use it to help make your experience better in the future.

Close Windowclose

We were unable to retrieve the attached file

Close Windowclose

Attach and remove files

add attachmentAdd attachment
Close Windowclose

Enter the URL you would like to link to in your post

Close Windowclose

This is how you use right click RTF editing

Enable right click RTF editing option allows you to add html markup into your tutorial such as images, bulleted lists, files and more...

-- click to close --

Uploading file...