Step 3.4 – Creating the profile page with Ion Auth

^{(Created at: February 05, 2015; Las update: March 11, 2016}

All good and well: we’ve done our login and logout pages, we’ve facilitated the administration of users and groups using Ion Auth. But what about the profile page? What if the user wants to change his/her credentials or our default password (which, shockingly, is… “password”).

For this it would be nice to have a profile page, where the user can do his/her own changes. We will not allow the user to change its own email or username, even if it is an admin. We should let this part in the hands of the other administrators (but you can do whatever you want in the end).

For the profile page we will create a profile() method inside the application/controllers/admin/User.php controller.

So let’s first modify the top menu (application/views/templates/_parts/admin_master_header_view.php) in order to put a link to the profile page.

<li><a href="<?php echo site_url('admin/user/profile');?>">Profile page</a></li>

Now going to our User.php we create the profile() method that, after interrogating the database, will output the profile page:

public function profile()
{
  if(!$this->ion_auth->logged_in())
  {
    redirect('admin');
  }
  $this->data['page_title'] = 'User Profile';
  $user = $this->ion_auth->user()->row();
  $this->data['user'] = $user;
  $this->data['current_user_menu'] = '';
  if($this->ion_auth->in_group('admin'))
  {
    $this->data['current_user_menu'] = $this->load->view('templates/_parts/user_menu_admin_view.php', NULL, TRUE);
  }

  $this->load->library('form_validation');
  $this->form_validation->set_rules('first_name','First name','trim');
  $this->form_validation->set_rules('last_name','Last name','trim');
  $this->form_validation->set_rules('company','Company','trim');
  $this->form_validation->set_rules('phone','Phone','trim');

  if($this->form_validation->run()===FALSE)
  {
    $this->render('admin/user/profile_view','admin_master');
  }
  else
  {
    $new_data = array(
      'first_name' => $this->input->post('first_name'),
      'last_name' => $this->input->post('last_name'),
      'company' => $this->input->post('company'),
      'phone' => $this->input->post('phone')
    );
    if(strlen($this->input->post('password'))>=6) $new_data['password'] = $this->input->post('password');
    $this->ion_auth->update($user->id, $new_data);

    $this->session->set_flashdata('message', $this->ion_auth->messages());
redirect('admin/user/profile','refresh');
  }
}

Nice… Now the application/views/admin/user/profile_view.php:

<?php defined('BASEPATH') OR exit('No direct script access allowed');?>
<div class="container" style="margin-top:60px;">
  <div class="row">
    <div class="col-lg-4 col-lg-offset-4">
      <h1>Profile page</h1>
      <?php echo form_open('',array('class'=>'form-horizontal'));?>
        <div class="form-group">
          <?php
          echo form_label('First name','first_name');
          echo form_error('first_name');
          echo form_input('first_name',set_value('first_name',$user->first_name),'class="form-control"');
          ?>
        </div>
        <div class="form-group">
          <?php
          echo form_label('Last name','last_name');
          echo form_error('last_name');
          echo form_input('last_name',set_value('last_name',$user->last_name),'class="form-control"');
          ?>
        </div>
        <div class="form-group">
          <?php
          echo form_label('Company','company');
          echo form_error('company');
          echo form_input('company',set_value('company',$user->company),'class="form-control"');
          ?>
        </div>
        <div class="form-group">
          <?php
          echo form_label('Phone','phone');
          echo form_error('phone');
          echo form_input('phone',set_value('phone',$user->phone),'class="form-control"');
          ?>
        </div>
        <div class="form-group">
          <?php
          echo form_label('Username','username');
          echo form_error('username');
          echo form_input('username',set_value('username',$user->username),'class="form-control" readonly');
          ?>
        </div>
        <div class="form-group">
          <?php
          echo form_label('Email','email');
          echo form_error('email');
          echo form_input('email',set_value('email',$user->email),'class="form-control" readonly');
          ?>
        </div>
        <div class="form-group">
          <?php
          echo form_label('Change password','password');
          echo form_error('password');
          echo form_password('password','','class="form-control"');
          ?>
        </div>
        <div class="form-group">
          <?php
          echo form_label('Confirm changed password','password_confirm');
          echo form_error('password_confirm');
          echo form_password('password_confirm','','class="form-control"');
          ?>
        </div>
        <?php echo form_submit('submit', 'Save profile', 'class="btn btn-primary btn-lg btn-block"');?>
      <?php echo form_close();?>
    </div>
  </div>
</div>

 

And that’s it: we can say that we’ve set up the security. Did I miss something? Please write a comment below.

A good advice would be to delete the Auth.php that we’ve pasted from the Ion_Auth library, so that there won’t be any doubts about what controller(s) will be used from now on for authentication.

If you’ve followed my tutorials you should have at least what I have. Here is the application and assets directories for the application we’ve developed so far.