Yii App In Subdomain Login Not Working

[psalmnoelfigueroa]

Hi. I just made a sample application at a website http://app.website.com, but it fails when I login into the system.

Locally, it is working. Upon tracing the bug, I found out that after the login code of $this->setState(‘roles’, $usersmodel->role); , the system succesfully sets the ‘roles’ to the user’s session (I echo the Yii::app()->user->getState(‘roles’) and Yii::app()->user->roles both). However, when I refresh the page, the state set would be gone.

I tried to locally see if my page somehow calls the log out url of my application, but it does not. Im not sure though if it has something to do with my HTAccess or something…

Here are my codes:

class UserIdentity extends CUserIdentity

{

private $id;


public function authenticate()


{	


	$username = $this->username;


	$pw = $this->password;





	$usersmodel = MUsers::model()->find('username = :uname', array(':uname'=>$this->username));


	


	if(!$usersmodel)


		$this->errorCode=self::ERROR_USERNAME_INVALID;


	elseif($usersmodel->password!==md5($this->password))


		$this->errorCode=self::ERROR_PASSWORD_INVALID;


	else{


		$this->id = $usersmodel->id;


        $this->setState('roles', $usersmodel->role);    


		$this->errorCode=self::ERROR_NONE;


	}


		


	return !$this->errorCode;


}





public function getId(){


    return $this->id;


}

}

#HTACCESS

Options +FollowSymLinks

IndexIgnore /

RewriteEngine on

if a directory or a file exists, use it directly

RewriteCond %{REQUEST_FILENAME} !-f

RewriteCond %{REQUEST_FILENAME} !-d

otherwise forward it to index.php

RewriteRule . index.php

class WebUser extends CWebUser

{

/**


 * Overrides a Yii method that is used for roles in controllers (accessRules).


 *


 * @param string $operation Name of the operation required (here, a role).


 * @param mixed $params (opt) Parameters for this operation, usually the object to access.


 * @return bool Permission granted?


 */


public function checkAccess($operation, $params=array())


{


   if (empty($this->id)) {


        // Not identified => no rights


        return false;


    }





    $role = $this->getState("roles");


    if ($role === 'superadmin') {


        return true; // admin role has access to everything


    }


    // allow access if the operation request is the current user's role


    return ($operation === $role);


}

}

I added the class to the main configuration file

‘class’ => ‘application.components.WebUser’,

And I configured a controller to read my session

public function filters()

{

return array(


    'accessControl', // perform access control for CRUD operations


);

}

public function accessRules()

{

return array(


    array('allow',


        //'actions'=>array('admin'),


        'roles'=>array('superadmin', 'staff'),


    ),


    array('deny',  // deny all users


        'users'=>array('*'),


    ),


);

}

When I remove/disable the redirection part when the form is validated and user is logged in, I try to echo the roles, and it works. But if I refresh the page or go to other links, the roles would be gone and I would be GUEST again.

Any help would be appreciated! Thank you!!

[psalmnoelfigueroa]

To help others out there with this issue, here are the steps I took:

• I placed a fresh copy of Yii (generated from yiic locally then uploaded to webhost)

• Logging in is not working in the fresh copy so I suspected that there is a session problem

• I suspected that there is a problem with PHP’s Session so I placed a var_dump(session_start()) on each page. It then came out with an error

No such file or directory

• I then browsed through the PHP.ini file and found that the session path is not familiar to me, so I contacted the webhost(iPage - i know) and asked them to help me with the session. They fixed the session save path and everything works now.

Hope this helps a random citizen out there!