« previous: Windows Vista Sports New Copy Dialog | next: A Group Is Its Own Worst Enemy »
Introducing UserBase
Filed on Mar 15, 2006 by / 4 repliesThis week we release our website login system, dubbed "UserBase." This system has been in use on various Encodable websites for about 4 years, and it’s now neatly packaged up for use on your own website.
UserBase allows you to create unlimited member and administrator accounts on your website, and then your other web applications can integrate with it to determine whether a given user should have access to certain resources on your site. For example, FileChucker integrates with UserBase so that each user can have their own private upload directory.
Speaking of FileChucker, it was one of the driving forces behind the release of UserBase. We had planned on releasing it eventually, but more and more FileChucker users wanted a full-featured login system for their uploads, so we made it a priority to release UserBase for public consumption.
Comments:
What does this do? I tried the demo, and after entering the username and password (from the page), I was redirected back to http://encodable.com/userbase/
Looks like you’ve found a bug.
UserBase redirects the visitor back to the page they came from after logging in, with the idea that if they tried to view (for example) the FileChucker demo and got the "you must log in first" message, they’d want to be sent right back there after logging in.
But the page you came from was not some app on the demo site requiring a login; it was an external website. So that’s the bug: UserBase should not redirect back to the referring page unless it was within the same site that UserBase is running on.
It’s fixed now. Thanks for pointing this out!
No problem! I just tried out the demo, and it seems pretty cool. Nice work!
One minor bug, at least for the demo: it allowed me to change the password for TestAdmin. This would lock out potential users from trying the demo. (I did change the password back to TestPassword, BTW...)
Ah, yes, of course! You shouldn’t be allowed to change the test password on the demo site. I’ve added that restriction now. Thanks, again!
Reply to this message here:
[ archives ]