I have a couple PHP scripts used for AJAX queries, but I want them to be able to operate under the umbrella of Joomla\'s authentication system. Is the following safe? Are
While I don't see anything in the code that's unsafe, it's best to make your AJAX/JSON calls to a standard Joomla component. There's a good article on how to do this here: http://blog.syncleon.com/2009/05/ajax-ify-your-joomla-website.html I've also written about JavaScript, Joomla, and asynchronous requests in my book http://www.packtpub.com/files/learning-joomla-1-5-extension-development-sample-chapter-8-using-javascript-effects.pdf (skip down to page 168).
Essentially, what you do is create a view for the output of your AJAX call, then create a view.xml.php (or view.json.php) file instead of a view.html.php. When you add &format=xml
to the end of your request URL, it will pull from view.xml.php instead of view.html.php.
sure does work , you need to get session data for users
jimport( 'joomla.session.session' );
$session =& JFactory::getSession();
print the session to see what comes out