检查用户是否登录模板

Question

Let's say I do something like this:

if (IsUserLoggedIn()) {
    echo $twig->render('home.html');
} else {
    echo $twig->render('login.html');
}

function isuserloggedin()
{
    return isset($_SESSION['userId']);
}

Is it a security issue not checking in the template... Or should it per-bases be fine?

Template:

Yo, you're logged in here, some details that only logged in should be able to see..

What I am asking is it essential to use some kind of conditional if statement in the Twig template to make sure again the user is logged in?

Cheers.

Answer 1

This is perfectly fine logic.

Depending on how granular your user permissions are (for example, if you have regular user, power user and administrator), you can pass that permission level into the Twig template and display sections of the page based on those variables.