Some content isn't meant for everyone: a members-only area, exclusive articles or content for paying subscribers. For that, your visitors need their own account. The Users module provides exactly that – secure, simple and cleanly separated from everything else.
Register, Confirm, Get Started
Visitors register with their email address, a password and optionally their name. They then receive a confirmation email. The account is only active once they click the link. That way, every account is backed by a real, reachable email address. If the email gets lost, it can be requested again at any time.
Forgot Your Password? No Problem
Anyone who has forgotten their password requests a reset link and sets a new one. All emails go through the PlaCeMS Mail module, so through your own mail server.
Security First
- Passwords are only stored encrypted, never in plain text.
- Confirmation and password reset links are also stored only encrypted and expire.
- Too many failed login attempts are detected and slowed down.
- All security-critical logic lives in exactly one place in the code – no patchwork.
Completely Separate From the Backend
Visitor accounts have nothing to do with admin access. They have their own login, their own sessions and their own data storage. A visitor account can never get into the backend – not even by mistake. On top of that, the public login pages deliberately sit outside the admin area, so you can lock down the backend even further later.
You Stay in Control
In the backend, you see all accounts with search and status. You can lock and unlock accounts, confirm them manually if an email doesn't arrive, or delete them for good. You always control who has access.
The Foundation for More
The Users module is the foundation for everything that needs logged-in visitors. With the blog, you make individual articles visible to members only. With the Subscriptions module, you offer paid memberships in several tiers. And the navigation shows logged-in visitors their own members' area.