O Guia Definitivo do Yii 1.1

We first need to configure the Web server so that a URL without the entry script can still be
handled by the entry script. For Apache HTTP server, this can be done by turning on the
URL rewriting engine and specifying some rewriting rules. We can create the file /wwwroot/
blog/.htaccess with the following content. Note that the same content can also be put in
the Apache configuration file within the Directory element for /wwwroot/blog.
RewriteEngine on
# if a directory or a file exists, use it directly
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
# otherwise forward it to index.php
RewriteRule . index.php
We then configure the showScriptName property of the urlManager component to be false.
Now if we call $this->createUrl('post/read',array('id'=>100)), we would obtain the URL/post/
100. More importantly, this URL can be properly recognized by our Web application.
Faking URL Suffix
We may also add some suffix to our URLs. For example, we can have /post/100.html
instead of/post/100. This makes it look more like a URL to a static Web page. To do so,
simply configure the urlManager component by setting its urlSuffix property to the suffix
you like.
Autenticação e Autorização
Authentication and authorization are required for a Web page that should be limited to
certain users. Authentication is about verifying whether someone is who they claim to be. It
usually involves a username and a password, but may include any other methods of
demonstrating identity, such as a smart card, fingerprints, etc.Authorization is finding out if
the person, once identified (i.e. authenticated), is permitted to manipulate specific
resources. This is usually determined by finding out if that person is of a particular role that
has access to the resources.
Yii has a built-in authentication/authorization (auth) framework which is easy to use and
can be customized for special needs.
The central piece in the Yii auth framework is a pre-declared user application component
which is an object implementing the [IWebUser] interface. The user component represents
the persistent identity information for the current user. We can access it at any place using
Yii::app()->user.
Using the user component, we can check if a user is logged in or not via
CWebUser::isGuest; we can login and logout a user; we can check if the user can perform