• Getting Started
  • Lessons
  • Developer Guides
    • Model and Databases
    • Templates and Views
    • Controllers
    • Forms
    • Configuration
    • Extending Silverstripe CMS
    • Testing
    • Debugging
    • Performance
    • Security
      • Members
      • Access Control
      • Permissions
      • Authentication
      • Sudo Mode
      • Security
      • Rate Limiting
      • Personal Data
      • SQL Placeholders
    • Email
    • Integration and Web Services
    • Search
    • i18n
    • Files
    • Customising the Admin Interface
    • Execution pipeline
    • Command Line Interface
    • Cookies and Sessions
    • Graphql
    • Deprecating code
  • Optional features
  • Upgrading
  • Changelogs
  • Contributing
  • Project Governance
  1. Developer Guides
  2. Security
Version 5Supported

This version of Silverstripe CMS is still supported though will not receive any additional features.

Go to documentation for the most recent stable version

Security and user authentication#

On this page

  • How to's

This guide covers using and extending the user authentication in Silverstripe CMS, permissions, user groups and roles, and how to secure your code against malicious behaviors of both your users and hackers.

Members

Learn how logged in users are managed in Silverstripe CMS

Access Control

Restrict CMS access to specific groups of users

Permissions

Customise the permission system in Silverstripe

Authentication

Explains Silverstripe CMS's Authentication options and custom authenticators.

Sudo Mode

Require users to verify their identity when performing sensitive actions

Security

Learn how to minimise vulnerabilities in your code

Rate Limiting

Silverstripe CMS's in built rate limiting features

Personal Data

How the Silverstripe CMS deals with data privacy

SQL Placeholders

SQL placeholders in ORM queries

How to's#

Edit on GitHub