How Is This Implemented in TYPO3?
The system extension felogin already provides everything needed for login: a login form, management of frontend users and groups, and a "forgot password" function. Pages and content elements can be enabled in the backend for specific user groups, so members can be shown different content than customers – on the same website. For a simple login area, no paid add-on modules are needed; the effort lies in configuration, designing the login form, and structuring the protected page tree.
folder
Important: TYPO3's page protection doesn't automatically protect the files themselves – anyone who knows the direct URL of a download file can access it even without logging in. For genuinely protected downloads, we use the extension fal_securedownload: it checks on every file request whether the user is authorized, and can be configured per folder in the file list – with no technical knowledge required for editors.
If visitors should be able to register themselves, an additional extension is also needed – out of the box, TYPO3 only supports manually creating users in the backend. For this, we offer our own extension feuserregistration: form-based registration, GDPR-compliant double opt-in, and automatic or editorially approved assignment to user groups. Since we develop the extension ourselves, it can be flexibly adapted to individual requirements.