阻止普通用户进入管理页面

Question

In model, User.php I set a function call isStatus()

 public function isStatus(){
    return $this->status; // 1 of mysql table column name status, let say 0 is admin and 1 is normal user.

}

In controller name LoginController.php, I want to make it if user status is 0 will go /admin page, other will go to / page which mean main page.

    protected function authenticated($request, $user){

    if($user->isStatus('0')){
        return redirect('/admin');
    }else{
        return redirect('/');
    }
}

User table with 'status' column are boolean but is not working.

Answer 1

Since you are using Laravel, lets refactor a little bit of your code.

You are passing a parameter to your function public function isStatus() with receives any parameter and returns a public value. Delete this function.

auth()->user() will get the connected user for you and you can access the status property just like this

auth()->user()->status

Your function shoud look like this:

return auth()->user()->status ? redirect('/admin'): redirect('/');

You can put this validation in all your controllers that needs the role authentication.

If you are interested you can also check some modules out of the box developed by external vendors that treats real profesional the validations and avoid repetitive code.

Check them out

• https://github.com/Zizaco/entrust
• https://github.com/Toddish/Verify-L4
• https://cartalyst.com/manual/sentry/2.1#laravel-4

and @Kuebel's favourite

• https://github.com/santigarcor/laratrust