Users Need Passwords (plainPassword)

Yo Hannes,

Yes, it's the best encrypt algorithm which is suggested by Symfony: http://symfony.com/doc/curr...

And yes, you can use salt to make your encrypted password more robust - just generate salt in User::__construct() and tweak getSalt() method to return it.

Cheers!

victor Thanks for that :) btw awasome tuts Ryan. Totaly worth every penny :) Really like your way of teaching :-) Best instructor for learning Symfony the *funny* and safe way

Hi Jayson,

Are you coding from scratch? Or are you in the "finish/" directory of downloaded course code? Please, search for "setPlainPassword" and "setPassword" calls in your code base and ensure you call these methods in right places. Probably you did some extra calls of these methods for debugging and forget to remove it later.

Cheers!

Hi Victor,

Thanks for reply, It works now.

Hi ahmedbhs!

Ah, very good question! I'm not using the salt for one very important reason: in security.yml, we configure out encoder to us the bcrypt algorithm. This algorithm does salting automatically: it includes the a salt automatically in the encoded password. So, we're returning null from getSalt() only because this encode does not require us to pass it a salt, it computes the salt automatically (which I believe is more secure anyways).

So, it's good news! You are using a salt... but you didn't need to do any work for it ;).

Cheers!

Hey Ángel Manuel Marqués Ruiz

Great question, and you are right, it may lead to weird behaviour, so you could add a "updatedAt" field to your entity, and change that field

Cheers!

Hey Moises,

Note that we do not add @ORM\Column() annotation for plainPassword field, so the column won't be added to the User table.

Cheers!

Oh yea. I see that now. Is there another video showing how to edit a user information? I tried copying the addAction and added this....

public function editAction(Request $request, User $user)
    {
        $form = $this->createForm(UserRegistrationForm::class, $user);

        $form->handleRequest($request);

        if ($form->isSubmitted() && $form->isValid()) {
            $user = $form->getData();

            $em = $this->getDoctrine()->getManager();
            $em->persist($user);
            $em->flush();

            $this->addFlash('success', $user->getUsername(). ' Updated');

            return $this->redirectToRoute('homepage');
        }

        return $this->render('user/edit.html.twig', [
            'form' => $form->createView()
        ]);
    }

I get an error Unable to guess how to get a Doctrine instance from the request information for parameter "user".

Hey Moises Cano

Can you show me how you defined your Route ? Look's like you are missing the User's wildcard

Cheers!

/**
* @Route("/edit/{usrid}", name="user_edit")
*/

Cool, you are not missing it, but, in order to work, it must be the name of an unique property (e.g. id, slug). So just change "usrid" to "id" or to whatever you named your id property on User class

Cheers!