Untitled

Hashing passwords and AuthComponent
// Users Model
public function beforeSave ($options = array ()) {
    $this->data['User']['password'] = AuthComponent::password($this->data['User']['password']);
    return true;
}

// Users Controller
public $components = array ('Acl', 'Session',
    'Auth' => array (
    'authenticate' => array (
        // login e logout sono di default i seguenti controller e views
        // 'loginRedirect' => array ('controller' => 'users', 'action' => 'login'),
        // 'logoutRedirect' => array ('controller' => 'users', 'action' => 'logout'),
        'Form' => array (
            'fields' => array (
            // il valore default
                'username' => 'email'
            ),
            'scope' => array (
                'User.active' => 1
            )
        )
    ),
    'authError' => 'Login error message I get'
));

public function login () {
    if ($this->request->is('post')) { // if the request came from post data and not via http (useful for security)
         // the password is hashed in User Model in beforeSave method as read on documentation
         // debug ($this->data);
         if ($this->Auth->login()) {
             $id = $this->Auth->user('id');
             return $this->redirect(array('controller'=>'users', 'action'=>$id, $this->Auth->user('username')));
         } else {
             $this->Session->setFlash('Login error message', 'default', array(), 'auth');
         }
    }
}

// the view login.ctp
echo $this->Form->text('User.email', array('id'=>'email', 'value'=>'your@email.com'));
echo $this->Form->password('User.password', array('id'=>'password', 'value'=>'password'));

// in the controller
debug($this->data);
// in the view
Array
(
    [User] => Array
    (
        [email] => the@email.com
        [password] => thepass // not hashed
    )
)

echo $this->Layout->sessionFlash();

public $components = array(
    'Session',
    'Cookie',
    'Acl',
    /**
     * Default is authorize option is ActionsAuthorize.
     * In this case, system uses AclComponent to check for permissions on an action level.
     * learn more: http://book.cakephp.org/2.0/en/core-libraries/components/authentication.html#authorization
     */
    'Auth'=> array(
        'authorize' => array(
            'Actions' => array('actionPath' => 'controllers')
        ),
        'authenticate' => array(
            'Form' => array(
                'fields' => array('username' => 'email', 'password' => 'password')
            )
        )
    )
);

if ($this->request->is('post')) {
        if ($this->Auth->login()) {
            // recirect stuffs