(not the zip file, the whole directory with any files).

I suggest you should (re)read chapter 1-3 of the book at least, and
then see what ad7six and teknoid wrote about SecurityComponent on
their blogs (try google)

On Nov 30, 4:39 pm, crisuwork <maran.e...@gmail.com> wrote:
> Hi Dave,
> I import the code of app in repository folder.
>
> On 30 Nov., 16:07, crisuwork <maran.e...@gmail.com> wrote:
>
> > I don't know how to import the code to the subversion repository. I
> > don't see any option for that. Can you give me some tips for that
> > action?
>
> > On 30 Nov., 15:11, Dave <davidcr...@gmail.com> wrote:
>
> > > crisuwork will you import the code to the subversion repository please?
>
> > > thank you
>
> > > On Mon, Nov 30, 2009 at 6:06 AM, crisuwork <maran.e...@gmail.com> wrote:
> > > >  I try to learn and to use cakephp in the right way. This is just a
> > > > base general code and I am trying to improve it. Especially I am
> > > > interested in the vulnerable side and ways to fix this. Thanks for
> > > > feedback and suggestions. :)
>
> > > > On 30 Nov., 11:48, "j0n4s.h4rtm...@googlemail.com"
> > > > <j0n4s.h4rtm...@googlemail.com> wrote:
> > > > > Hello,
>
> > > > > my suggestions are:
> > > > > - clean your code from outcommented waste/old stuff (its just much)
> > > > > - use cake's ORM instad of query()
> > > > > - use cake errors or session->setFlash instead of render('errors/
> > > > > blah')
> > > > > - docblocks make no sense if you do not describe the usage of the
> > > > > method or the meaning of the parameters
> > > > > - your application is probably highly vulnerable: a.) no usage of ORM
> > > > > at some places, direct insertion of ID into query, no idea if it gets
> > > > > escaped (try model->escapeField(), if you really want to stick with
> > > > > query()) b.) no use of securitycomponent, did not notice anything
> > > > > equal
>
> > > > > On Nov 30, 12:07 am, crisuwork <maran.e...@gmail.com> wrote:
>
> > > > > > A Social Portal Demo developed in Cakephp giving You possibility to
> > > > > > save your favorite music songs from Youtube by categories. Cakephp
> > > > > > core version used is 1.2x. The purpose of this application is 
> > > > > > teaching
> > > > > > and understand how Cakephp it works. Available options: Register,
> > > > > > Login, Profile Modify, Add song by Category.
>
> > > > > > Demo:http://eopp.de
> > > > > > Download source fromhttp://code.google.com/p/marancakemelody/
>
> > > > > > Any suggestions are welcome.
>
> > > > Check out the new CakePHP Questions sitehttp://cakeqs.organdhelpothers
> > > > with their CakePHP related questions.
>
> > > > You received this message because you are subscribed to the Google 
> > > > Groups
> > > > "CakePHP" group.
> > > > To post to this group, send email to cake-php@googlegroups.com
> > > > To unsubscribe from this group, send email to
> > > > cake-php+unsubscr...@googlegroups.com<cake-php%2bunsubscr...@googlegroups.com>For
> > > >  more options, visit this group at
> > > >http://groups.google.com/group/cake-php?hl=en

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en

Reply via email to