You cannot serialize or unserialize PDO instances

Hello Milo,

The Tracy exception looks like this scary red page …

Hello Greeny,
Where? which line is concerned?

Like this? :/ (completely unsure to understand you…) :

if(!NS\Passwords::verify($mdp, $is_membre->password)) {
   $this->flashMessage('Vos identifiant et mot de passe ne coïncident pas.', 'failure');
} else {
   $this->flashMessage('YOUPI.', 'success');
   $user = $this->getUser();
   $user = iterator_to_array($user); // Greeny tip ?
   $user->login($is_membre->pseudo, $mdp);
   echo $user->isLoggedIn() ? 'yes' : 'no';
}

Result : Recoverable Error – Argument 1 passed to iterator_to_array() must implement interface Traversable, instance of Nette\Security\User given

I didn't read that kind of code in other examples :
Garry or Paolo

But where is Authentizator file? Do you mean IAuthenticator?

<?php

/**
 * This file is part of the Nette Framework (http://nette.org)
 * Copyright (c) 2004 David Grudl (http://davidgrudl.com)
 */

namespace Nette\Security;


/**
 * Performs authentication.
 */
interface IAuthenticator
{
	/** Credential key */
	const USERNAME = 0,
		PASSWORD = 1;

	/** Exception error code */
	const IDENTITY_NOT_FOUND = 1,
		INVALID_CREDENTIAL = 2,
		FAILURE = 3,
		NOT_APPROVED = 4;

	/**
	 * Performs an authentication against e.g. database.
	 * and returns IIdentity on success or throws AuthenticationException
	 * @return IIdentity
	 * @throws AuthenticationException
	 */
	function authenticate(array $credentials);

}

Or do you want my UserManager under App/Model/ (which implements IAuthenticator) ?

<?php

namespace App\Model;

use Nette;
use Nette\Security\Passwords;


/**
 * Users management.
 */
class UserManager extends Nette\Object implements Nette\Security\IAuthenticator
{
	const
		TABLE_NAME = 'membres',
		COLUMN_ID = 'id',
		COLUMN_NAME = 'pseudo', // changed my column since first message (nick->pseudo)
		COLUMN_PASSWORD_HASH = 'password',
		COLUMN_ROLE = 'role';


	/** @var Nette\Database\Context */
	private $database;


	public function __construct(Nette\Database\Context $database)
	{
		$this->database = $database;
	}


	/**
	 * Performs an authentication.
	 * @return Nette\Security\Identity
	 * @throws Nette\Security\AuthenticationException
	 */
	public function authenticate(array $credentials)
	{
		list($username, $password) = $credentials;

		$row = $this->database->table(self::TABLE_NAME)->where(self::COLUMN_NAME, $username)->fetch();

		if (!$row) {
			throw new Nette\Security\AuthenticationException('Le pseudo est incorrect.', self::IDENTITY_NOT_FOUND);

		} elseif (!Passwords::verify($password, $row[self::COLUMN_PASSWORD_HASH])) {
			throw new Nette\Security\AuthenticationException('Le mot de passe est incorrect.', self::INVALID_CREDENTIAL);

		} elseif (Passwords::needsRehash($row[self::COLUMN_PASSWORD_HASH])) {
			$row->update(array(
				self::COLUMN_PASSWORD_HASH => Passwords::hash($password),
			));
		}

		$arr = $row->toArray();
		unset($arr[self::COLUMN_PASSWORD_HASH]);
		return new Nette\Security\Identity($row[self::COLUMN_ID], $row[self::COLUMN_ROLE], $arr);
	}


	/**
	 * Adds new user.
	 * @param  string
	 * @param  string
	 * @return void
	 */
	public function add($username, $password)
	{
		try {
			$this->database->table(self::TABLE_NAME)->insert(array(
				self::COLUMN_NAME => $username,
				self::COLUMN_PASSWORD_HASH => Passwords::hash($password),
			));
		} catch (Nette\Database\UniqueConstraintViolationException $e) {
			throw new DuplicateNameException;
		}
	}

}



class DuplicateNameException extends \Exception
{}

Hope I made a good guess…

I haven't touched a thing somewhere else (views, controllers, the first lines in the model UserManager are the only files I modify)…

About the exception : when I browse the folder, I find vendor/security/src/security/AuthentificationException.
This file contents :

namespace Nette\Security;

/**
 * Authentication exception.
 */
class AuthenticationException extends \Exception
{
}

And I don't find \Exception anywhere…
Where is it supposed to be?

I will generate another Nette project and test its behaviour + see if its structure is the same.
It was not the case between the first (20/11/2015) and second project (02/12/2015) I created with composer…

Last edited by Reka (2015-12-09 18:50)

@Reka The \Exception is from PHP core.

If you can, upload somewhere the Tracy's red screen as HTML (in browser, Save As…). Check that it does not contain any password or sensitive data.

@esorimer not true, since this exception is thrown on data serialization, we can trace where data were passed to session. And since the exception is thrown at line ->login(…), its 99% that he is passing somewhere ActiveRow or something.

@esorimer But this only passes data to Authenticator. You cannot tell anything until we will see Authenticator from @Reka

That paste helped, thanks.

Error is in your Authenticator on last lane of authenticate method (return new Nette\Security\Identity($row[self::COLUMN_ID], $row[self::COLUMN_ROLE], $arr);)

First and last arguments are ok, but the middle one is not just value. You are using table roles, so in $row[self::COLUMN_ROLE] is ActiveRow. Possible fix is, that you replace $row[self::COLUMN_ROLE] with $row[self::COLUMN_ROLE]->name (instead of name use the name of column in table roles where is name for that role).

<ot> @esorimer it was exactly what I thought </ot>