Thread

function index()
    {
        $this->load->library('Erkanaauth');
        $this->load->library('validation');
        
        /* validation rules for login form */
        $rules['email'] = "trim|required|valid_email|xss_clean|callback__verify_login";
        $rules['pass'] = "trim|required|xss_clean|md5";
        
        $this->validation->set_rules($rules);
        
        if($this->validation->run() == FALSE) {
            $this->load->view('login_view');
        } else {
            redirect('/', 'refresh');    
        }
        
    }

function _verify_login($email) 
    {
       $this->load->helper('security');
       $password = dohash($this->input->post('pass'), 'md5');
       if($this->erkanaauth->try_login(array('email' => $email, 'password' => $password ))) {
           return TRUE;
       } else {
           $this->validation->set_message('_verify_login', 'Invalid login credentials.');
           return FALSE;
       }
    }

function index()
    {
        $this->load->library('Erkanaauth');
        if (!$this->erkanaauth->try_session_login()) {
            redirect('/login', 'refresh');
        }

        /* We need to fetch some data to populate into the view. 
           Retrieve all available CPT codes. */
        $data['cpt'] = $this->dbmodel->select_cpt_codes();
        
        /* Retrieve all patients that aren't discharged */
        $data['patients'] = $this->dbmodel->select_active_patients();
        
        /* Retrieve current date for CPT population */
        $timestamp = time();
        $data['current_date'] = date("d M Y", $timestamp);
        
        $this->load->view('landing_page_view2', $data);
    }

if (!$this->erkanaauth->try_session_login()) {
            redirect('/login', 'refresh');
        }

redirect('', 'refresh')

class Auth_Controller extends Controller {
    function auth_controller() {
        parent::Controller();
        if (!$this->erkanaauth->try_session_login()) redirect('/login', 'refresh');
    }
}

class Products extends Auth_Controller {
}

<?php

/**
 * Non-intrusive Direct Access Model
 *
 * This model creates and controls direct access tokens
 * which can be used for features like forgotten password.
 *
 * @package    CodeIgniter
 * @subpackage    Models
 * @category    Authorization
 * @author        Thomas Traub
 * @link        <a href="http://www.tomcode.com/inside/codeigniter/direct_access">http://www.tomcode.com/inside/codeigniter/direct_access</a>
 */
class Direct_access_model extends Model {

    var $db_table = 'direct_access';
    var $hash_field = 'hash';
    
    /** 
     * Creates, stores and returns the direct
     * access token for the passed condition. 
     * Overwrites an exiting old entry.
     * 
     * @param array associative the database query condition
     * @return string the access URL param
     */
    function set_access($condition)
    {
        // create hash
        $data[$this->hash_field] = str_shuffle(uniqid('' .rand(0, 32768)));

        // look for an existing entry
        $query = $this->db->getwhere($this->db_table, $condition, 1, 0);
        $row = $query->row();
        
        //  update or insert
        if ($query->num_rows == 0) 
        {
            $condition = array_merge($condition, $data);
            
            $this->db->insert($this->db_table, $condition); 
        }
        else $this->db->update($this->db_table, $data, $condition);
        
        // return only in case of success
        if($this->db->affected_rows() == 1) return array_merge($condition, $data);
    }
    
    /**     
     * Returns the ident data for a passed condition (hash token),
     * and, by default, deletes the found entry.
     * 
     * @param array associative the database query condition
     * @param boolean shall the entry be deleted
     * @return mixed boolean:false or object: the query row
     */
    function get_access($condition, $delete_condition = true)
    {
        $query = $this->db->getwhere($this->db_table, $condition, 1, 0);
        
        if ($query->num_rows != 1) return FALSE;
        
        if($delete_condition) $this->delete_access($condition);
        
        return $query->row();
    }
    
    /**     
     * Deletes an entry based on the passed query condition
     * 
     * @param array associative the database query condition
     */
    function delete_access($condition)
    {
        $this->db->delete($this->db_table, $condition); 
    }
}

<?php  if (!defined('BASEPATH')) exit('No direct script access allowed');
 
 class Auth {
 
    var $CI;
    
    function __construct() {
        $this->CI =& get_instance();
        log_message('debug', 'Authorization class initialized.');
        
        $this->CI->load->database();
    }
    

    function try_login($condition = array()) {
        $this->CI->db->select('id');
        $query = $this->CI->db->getwhere('users', $condition, 1, 0);
        if ($query->num_rows != 1) {
            return FALSE;
        } else {
            $row = $query->row();
            $this->CI->session->set_userdata(array('user_id'=>$row->id));
            return TRUE;
        }
    }
    
    
     function logout() {
        $this->CI->session->set_userdata(array('user_id'=>FALSE));
    }
    
    
    function get_user($id) {
        if ($id) {
            $query = $this->CI->db->getwhere('users', array('users.id'=>$id), 1, 0);
            if ($query->num_rows() == 1) {
                return $query->row();
            } else {
                return FALSE;
            }
        } else {
            return FALSE;
        }
    }
 }
 
 ?>

<?php  if (!defined('BASEPATH')) exit('No direct script access allowed');
 
class Public_Controller extends CI_Controller {
    function Public_Controller() {
        parent::Controller();
        $this->data->user = get_user($this->session->userdata('user_id'));
    }
}

class Admin_Controller extends Public_Controller {
    function Admin_Controller() {
        parent::Controller();
        if ($this->data->user === FALSE) {
            redirect('user/login');
            return;
        }
    }
}