Deny dirrect access to a controller...

[eluser]rvent[/eluser]
Nope...

Here is one of the functions i have in the default controller:

Code:

function test()
    {
        $user = '[email protected]';
        $pass = 'my_secret';
        $out = $this->hst_ldap_auth->hst_ldap_login($user, $pass);
        
        if($out)
            redirect('/welcome', 'location');
        else
            echo 'no good';
            
    }

If user successfully logs in he is redirected from /application/controller/login.php to application/controller/control_panel.php

But i find that i am able to type http://localhost/index.php/control_panel and get to it with no problems, therefore, defying the purpose of the authentication.

What you mention it refers to whether or not a function can be called from a different class..

Any more ideas..?

Thanks