I'm confused...

So what if they do want to edit the password? Do you check $this->data
before save and populate the fileds array in save() conditionally?

I guess my real question is why not just don't put the password field on the
form.

On Jan 14, 2008 7:04 AM, djiize <[EMAIL PROTECTED]> wrote:

>
> and better, use the security component, it will secure your forms very
> well
> but it's another topic
>
> On 14 jan, 14:03, djiize <[EMAIL PROTECTED]> wrote:
> > you're welcome
> > in addition, it's always a good practice to specify which fileds to
> > update in each Model->save() call
> > it will prevent POST forgery
> >
> > On 14 jan, 12:37, Mike Digital Egg <[EMAIL PROTECTED]> wrote:
> >
> > > Hey djiize , that worked great, thanks :)
> >
> > > Mike
> >
> > > On Jan 14, 11:39 am, djiize <[EMAIL PROTECTED]> wrote:
> >
> > > > you can speciify which fields to update with the 3rd parameter of
> > > > Model->save():
> http://api.cakephp.org/1.2/class_model.html#ebe42ae387be89985b5a35dd4...
> >
> > > > On 14 jan, 11:03, Mike Digital Egg <[EMAIL PROTECTED]> wrote:
> >
> > > > > Hi,
> >
> > > > > I am using the Auth component for 1.2 and it is all working fine
> > > > > except when I go to edit a user I want to have the option to leave
> the
> > > > > password field blank and have itleave the password unchanged.
> Whenever
> > > > > I do this it rehashes the password using '' as the password. I
> have
> > > > > tried using unset( $this->data['User']['password'] ); so that the
> > > > > password field is not added to the query but it does not work. Any
> > > > > ideas how I would do this?
> >
> > > > > Thanks
> >
> > > > > Mike
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to