Pro Zend Framework Techniques: Build a Full CMS Project

Chapter 8. Handling Security in a Zend Framework Project

Security should be the first and foremost concern of any web application project. The same tools that you are building to make it easy for your clients to manage their sites can be leveraged by hackers if you're not careful. This is a serious responsibility that should not be taken lightly.

The good news is that the Zend Framework developers take security very seriously and have built a stable, well-tested set of components that make it easier to write more secure programs. These components include Zend_Auth and Zend_Acl.

• Zend_Auth is solely concerned with authenticating (and persisting) the application users.

• Zend_Acl handles resources (pages), roles (user roles), and which roles can access ...