Zend FR

<?php


/**
 * 
 *
 * 
 * 
 */

 
// pour le developpement
error_reporting(E_ALL|E_STRICT);


// chemin vers racine du site 
define('SITE_PATH', './'); 

// chemin vers moteur application
define('LIB_PATH', './application/');


// la date 
date_default_timezone_set('Europe/Paris');


// les includes de base
set_include_path(
      LIB_PATH
    . PATH_SEPARATOR . LIB_PATH . 'lib/ZF'
    . PATH_SEPARATOR . LIB_PATH . 'lib/ZF/library'
    //. PATH_SEPARATOR . LIB_PATH . 'lib/ZF/incubator/library'
    . PATH_SEPARATOR . LIB_PATH . 'lib/Neni'
    . PATH_SEPARATOR . LIB_PATH . 'models'
    . PATH_SEPARATOR . get_include_path()
);


// A METTRE AILLEURS : FONCTIONS POUR CONVERTIR
function ConvertJSDateToMysql($txt){
    $tmp = explode('/',$txt);
    if( (isset($tmp[2]))&&(isset($tmp[1]))&&(isset($tmp[0])) ){
        return $tmp[2].'-'.$tmp[1].'-'.$tmp[0];
    }else{
        return 'NULL';
    }
}


// init
require_once 'Zend/Loader.php';
require_once 'Zend/Registry.php';

// le fichier de configuration
require_once 'Zend/Config/Ini.php';
$config = new Zend_Config(new Zend_Config_Ini('./application/config/config.ini', 'test'));


// adresse absolue du site 
define('SITE_URL', $config->weburl); 
define('SITE_ABS_URL', 'http://'.$config->webhost.$config->weburl); 


// la BDD
require_once 'Zend/Db.php';
require_once 'Zend/Db/Adapter/Pdo/Mysql.php';
$db = Zend_Db::factory($config->database);
Zend_Registry::set('db', $db);

// identification
require_once 'Zend/Auth.php';
$auth = Zend_Auth::getInstance();
require_once 'Zend/Auth/Storage/Session.php';
$auth->setStorage(new Zend_Auth_Storage_Session('leNomQuiVaBien'));
Zend_Registry::set('auth', $auth);

// les droits de l'application
require_once("ModemAcl.php");
$acl = new Modem_Acl($auth);
Zend_Registry::set('acl', $acl);


// on y va
require_once 'Zend/Controller/Front.php';
require_once 'Zend/Controller/Router/Rewrite.php';
require_once 'Neni_PluginAuth.php';
$router = new Zend_Controller_Router_Rewrite;
$front = Zend_Controller_Front::getInstance();
$front->setControllerDirectory(LIB_PATH.'bureau/controllers');
$front->throwExceptions(true);
$front->addModuleDirectory(LIB_PATH.'modules');
$front->setRouter($router)
      ->setDispatcher(new Zend_Controller_Dispatcher_Standard())
      ->setRouter(new Zend_Controller_Router_Rewrite())
      ->registerPlugin(new Neni_PluginAuth($auth, $acl));
$front->dispatch();


?>

<?php

// verification que session ok
// et aussi que droit ok


require_once 'Zend/Controller/Plugin/Abstract.php';

class Neni_PluginAuth extends Zend_Controller_Plugin_Abstract
{
    private $_auth;
    private $_acl;

    private $_login = array('module' => 'default',
                             'controller' => 'index',
                             'action' => 'index');

    private $_noauth = array('module' => 'default',
                             'controller' => 'login',
                             'action' => 'session');

    private $_noagreement = array('module' => 'default',
                            'controller' => 'login',
                            'action' => 'privileges');

   
    public function preDispatch(Zend_Controller_Request_Abstract $request)
    {

        $this->_auth = Zend_Registry::get('auth');
        $this->_acl = Zend_Registry::get('acl');

        if ($this->_auth->hasIdentity()) {
            $role = $this->_auth->getStorage()->read()->role;
        } else {
            $role = 'invite';
        }
       
        $controller = $request->controller;
        $action = $request->action;
        $module = $request->module;
        $resource = $controller;
   
            
        if (!$this->_acl->has($resource)) {
            $resource = null;
        }

            // test session
            if (!$this->_auth->hasIdentity()) {
                // test si la première page
                if(($controller=='index')&&($module=='default')){
                    $module = $this->_login['module'];
                    $controller = $this->_login['controller'];
                    $action = $this->_login['action'];
                // si le login
                }else if(($controller!='login')&&($module!='default')){
                    $module = $this->_noauth['module'];
                    $controller = $this->_noauth['controller'];
                    $action = $this->_noauth['action'];
                }
            }else{
                // test droits

            //$f = fopen('debug.txt','a');
            //fwrite($f,"module:".    $module."\ncontroller:".$controller."\naction:".    $action."\n");
            //fwrite($f,'role:'.$role."\nautrisaition:".(($this->_acl->isAllowed($role, $module, /*$controller,*/ $action))?'oui':'non')."\n\n");
            //fclose($f);
            
                if(!$this->_acl->isAllowed($role, $module, /*$controller,*/ $action)){
                    $module = $this->_noagreement['module'];
                    $controller = $this->_noagreement['controller'];
                    $action = $this->_noagreement['action'];
                }
            }

        $request->setModuleName($module);
        $request->setControllerName($controller);
        $request->setActionName($action);
    }
    
    
}

<?php


//
// Login sur bureau
//

require_once 'Zend/Controller/Action.php';



class LoginController extends Zend_Controller_Action 
{

    var $db, $auth;

    public function init()
    {
        Zend_Controller_Front::getInstance()->setParam('noViewRenderer', true);
        $this->db = Zend_Registry::get('db');
        $this->auth  = Zend_Registry::get('auth');
        //$this->getResponse()->setHeader('Content-Type', 'application/x-json');
    }



    public function indexAction() 
    {
        // verification pas vide
        if((!isset($_POST['login']))||(!isset($_POST['password']))||($_POST['login']=='')||($_POST['password']==''))
        {
            $data['success'] = false;
        }
        else
        {
            // regarde si dans la BDD
            require_once 'Zend/Auth/Adapter/DbTable.php';
            $authAdapter = new Zend_Auth_Adapter_DbTable($this->db);
            $authAdapter->setTableName('bureau_utilisateur')
                ->setIdentityColumn('pseudo')
                ->setCredentialColumn('password');

            $authAdapter->setIdentity($_POST['login'])
                ->setCredential($_POST['password']);
                

           $result = $this->auth->authenticate($authAdapter);
            if ($result->isValid()) 
            {
                $data['success'] = true;
                // sauvegarde dans session
                $this->auth->getStorage()->write($authAdapter->getResultRowObject(array('id', 'pseudo', 'nom', 'prenom', 'email', 'role','actif')));
                // on envoie le bureau à afficher
                $data['data']=$this->auth->getStorage()->read();
            }
            else
            {
                $data['success'] = false;
            }

        }

        $this->getResponse()->setBody(json_encode($data));

    }


    // si plus d'identité (delai session) 
    public function sessionAction() 
    {
        $this->getResponse()->setBody('{success:false,initialisation:pbreconnect(),message:"session"}');
    }

    // si pas les privileges 
    public function privilegesAction() 
    {
        $this->getResponse()->setBody('{success:false,initialisation:pbpasdedroits(),message:"droit"}');
    }

    

}

// Create auth object
$auth = Zend_Auth::getInstance();
// Create acl object
$acl = new MyAcl($auth); // see 

....

// setup controller
$frontController = Zend_Controller_Front::getInstance();
$frontController->registerPlugin(new MyPluginAuth($auth, $acl));
$frontController->throwExceptions(true);
$frontController->setControllerDirectory('./application/controllers');

// run!
$frontController->dispatch();

<?php

class MyPluginAuth extends Zend_Controller_Plugin_Abstract
{
    private $_auth;
    private $_acl;

    private $_noauth = array('module' => 'default',
        'controller' => 'login',
        'action' => 'index');

    private $_noacl = array('module' => 'default',
        'controller' => 'error',
        'action' => 'privileges');

    public function __construct($auth, $acl)
    {
        $this->_auth = $auth;
        $this->_acl = $acl;
    }

    public function preDispatch($request)
    {
    
            if ($this->_auth->hasIdentity()) {
                // Recuperer içi le role de l'utilisateur connecté
                //$role = $this->_auth->getIdentity()->getUser()->role;
                $role = 'membre';
            } else {
                $role = 'invite';
            }
        
        
            
        $role = 'invite';
        
        
        $controller = $request->controller;
        $action = $request->action;
        $module = $request->module;
        $resource = $controller;

        if (!$this->_acl->has($resource)) {
            $resource = null;
        }

        if (!$this->_acl->isAllowed($role, $resource, $action)) {
            if (!$this->_auth->hasIdentity()) {
                $module = $this->_noauth['module'];
                $controller = $this->_noauth['controller'];
                $action = $this->_noauth['action'];
            } else {
                $module = $this->_noacl['module'];
                $controller = $this->_noacl['controller'];
                $action = $this->_noacl['action'];
            }
        }

        $request->setModuleName($module);
        $request->setControllerName($controller);
        $request->setActionName($action);

    }
}

Strict Standards: Declaration of MyPluginAuth::preDispatch() should be compatible with that of Zend_Controller_Plugin_Abstract::preDispatch() in /Applications/MAMP/htdocs/SncfStore/application/lib/MyPluginAuth.php on line 63

Fatal error: Uncaught exception 'Zend_Session_Exception' with message 'Session must be started before any output has been sent to the browser; output started in /Applications/MAMP/htdocs/SncfStore/application/lib/MyPluginAuth.php/63' in /Applications/MAMP/htdocs/library/Zend/Session.php:359 Stack trace: #0 /Applications/MAMP/htdocs/library/Zend/Session/Namespace.php(116): Zend_Session::start(true) #1 /Applications/MAMP/htdocs/library/Zend/Auth/Storage/Session.php(85): Zend_Session_Namespace->__construct('sessionauth') #2 /Applications/MAMP/htdocs/SncfStore/index.php(60): Zend_Auth_Storage_Session->__construct('sessionauth') #3 {main} thrown in /Applications/MAMP/htdocs/library/Zend/Session.php on line 359