Hot answers tagged

9

Yip. You're looking for: ee()->session->userdata('member_id'); It's in the session class: http://ellislab.com/expressionengine/user-guide/development/usage/session.html


8

I know this is marked answered for 8 months, but here is an answer without any add-ons needed, which is in the original question. Set template access for guests to off. Have it load a login template instead. In the login template do this for the login form: {exp:member:login_form return="{segment_1}/{segment_2}/{segment_3}"} What I like about this ...


7

You could use one of the add-ons that connect member registration to channel entries and then use a relationship field to connect a member to other members. (alternatively, you could use a fieldtype a la select member) Several member add-ons that connect members to channel entries: Zoo Visitor http://ee-zoo.com/add-ons/visitor/ Safecracker registration ...


7

If you're comfortable with SQL, you can update the database to change the member_id on the comments to one that's not being deleted. So, you could create a 'past member' member, and then update the comments to use the member_id of the 'past member'. This will disconnect those comments from the members you want to delete. Other options: Save a backup of the ...


7

You will get that error if you have secure forms enabled, and you submit a form without including a valid XID in the post. More here: http://ellislab.com/blog/entry/putting-the-secure-in-secure-mode-forms Add this to your form: <input type="hidden" name="XID" value="{XID_HASH}"> You can disable secure forms in your config, although this is not ...


7

Based on @Max Lazar's comment I was looking over our "logout" code vs. the code given in EE's documentation and I noticed this difference, we use this code: Log Out, but the docs say to use {path='logout'}. Does it matter? I solved the mystery. The question I made above ^^^ was key and I probably should have just tried it from the get go. Turns out it ...


7

Yes, the cookies are still susceptible to being intercepted. The full set of cookies for matching domains is transmitted by the browser with each page request to that domain, even if the original cookies were set using HTTPS/SSL and the current page is HTTP. One way around this is by setting the "secure" flag on cookies you set. Any cookies set with the "...


5

If you're comfortable doing this directly in the database, these are SQL queries that delete all members who are not authors of channel entries: delete from exp_members where member_id not in (select author_id from exp_channel_titles); delete from exp_member_data where member_id not in (select author_id from exp_channel_titles); delete from ...


5

When a variable is returned, instead of echoing out your data means that it isn't an associated variable. In the Solspace User docs, it uses the variable {bday_d}. Try that, but there are more for the birthday, so check them out.


5

Under Members -> Preferences in the control panel, you can set the Profile Triggering Word (see docs) to % which will make them completely inaccessible from the frontend. Another technique is to configure it randomly in the config.php like this: $config['profile_trigger'] = rand(0,time());


5

Yup, just load the Member model: ee()->load->model('member_model'); ee()->member_model->delete_member($member_id, $heir_id); $member_id can be a single member, or an array of ids. $heir_id is the member_id that should take authorship of any existing entries belonging to the member being deleted.


5

I've also been struggling with this exact same situation for quite a while, it seems to be an EE bug. Here's what I did to resolve it. Your markup is fine, your member settings are also fine. The only member setting that is vital to this operation is the "Can edit entries authored by others" under "Channel Posting Privileges" in the Member Group settings. ...


4

I had the same issue, and ultimately discovered it was caused by a setting in Focus Labs EE Master Config. In config.master.php around line 258 you'll find: /** * Member-based settings */ //$env_config['profile_trigger'] = rand(0,time()); // randomize the member profile trigger word because we'll never need it I'm not sure why randomising the ...


4

"When updating username, screen_name or password inside the update form providing the current password is always required except for super-admins and the parameter does not have to be specified." Source: http://ee-zoo.com/docs/visitor/tags/update.html Even though the user may not explicitly be updating their username, for example, since the field appears in ...


4

Are you able to see where they are coming from? Is it coming from random user agents or specific ones? Or is the user agent blank? htaccess blacklist any strange user agents if that helps. Or block by some country ip addresses for now if it is specific.


4

This can be achieved by developing a small custom third party addon (module) and some Ajax stuff. I think, you are having PDF file linked in HREF so there would an event be triggered on click at that PDF link with Ajax call. A small module would be created which will create a database table to track all the downloads This module would have an ACTION which ...


4

it is not possible to do this with standard EE function. So you need make a new add-on - module with action which you can run by cron. Every time when cron will be run, you can get unread PM for last 24 using next query: SELECT md.message_id as message_id, md.message_date as message_date, md.message_subject as subject, md.message_body as message, mc....


4

You might want to take a look at Postmaster (https://objectivehtml.com/postmaster/) for doing this. With Postmaster I believe you can create 'tasks' which can be executed by cron and it provides facilities to handle custom messaging etc. It's also possible to set up notifications with some templating logic and these can also be triggered via a cron. I'm ...


4

If you're looking for robust tracking of user actions in the Control Panel than what EE provides, there is Audit (and Audit Pro). Audit adds some additional user tracking beyond what EE does. Here is the list of what it tracks, from its page on Devot:ee Member Logins, including Control Panel & front-end Member Logouts, including Control Panel &...


4

You can disable the access to the Control Panel to a Member Group if you want to: Members > members groups. The Banned Member Group, for example, can't access the Control Panel.


4

As Alex mentions, when a user has "Can delete members" rights, he/she can delete any member. A different approach would be to, not allow to delete members, but to only allow users to be moved to a member group with no (login) rights at all. You can restrict to which group a member can be assigned by setting the group to "locked". If needed, the restricted ...


4

The simplest solution is to use EE's built-in Member Groups, then use conditional checking in your templates: {if logged_in_group_id == "5"} // Place some group-specific code here {/if} {if logged_in_group_id == "8"} // Place some group-specific code here {/if}


3

Go to Add-ons --> Modules --> Zoo Visitor --> Troubleshooting, it should be there. [edit]: In Add-ons --> Modules --> SafeCracker, always check to see if anonymous registrations are allowed.


3

Check this permission for their member group: Can change the author name when posting channel entries. (Under Members → Member Groups → Edit Member Group.)


3

This may be related to bug #19338 which was fixed in EE 2.6.1. There was also a manual fix that could be applied. See 19338 on the changelog.


3

You need to write some custom code in the Simple Commerce module. Get the txn_type for the ipn then add a method to handle it. For an out of the box solution, check if memberr can do what you want.


3

You can definitely do this. General setup would be something like this. Set Require Member Account Activation? to No activation required Create a custom member field to indicate whether member has completed the email activation process. Email confirmed? : y For the pages (or specific elements) of the content you don't want them to access, run a check for ...


3

There aren't any add-ons that I know of that would add front-end member functionality to the Core version of ExpressionEngine. Solspace User, as well as Zoo Visitor and Profile:Edit all build on top of EE's existing member module, and therefore don't work on EE Core. I do have to ask though, what kind of project are you working on where EE's price tag makes ...


3

I had to remove the group_id="7" from the freemember registration form tag. With it in there, the registrants never went to "Pending" first, they would be put into the member group with id of 7.


3

You can query the exp_sessions table, where you can see both the ip_address and member_id for each session. Multiple sessions from wildly different IPs would be a cue that an account was being shared widely.


Only top voted, non community-wiki answers of a minimum length are eligible