date:20100414

Re: Acl - inconsistent behaviour when accessing an unauthorised url

2010-04-14 Thread Tonu Tusk

Hi there, just bumping this - I would have thought that someone may
have some insight into an important core
part of the framework misbehaving?

On Apr 12, 9:31 am, Tonu Tusk lvot...@googlemail.com wrote:
 Hi guys, I have had problems with this in the past (with a workable
 hack which might break things in the future)

 Basically, I have the following scenario. I have Auth and Acl setup as
 in the tutorial (actions based authentication)

 now if I have an authenticated user but who has restricted access to a
 url mysite.com/restricted/page

 I get a variety of behaviours based on how I access the page.

 If I try to access the page whilst not logged on and then logging on,
 I get a redirect, If I am logged on and directly enter the url (no
 referer) I get redirected to home ('/') and if I try to access the
 restricted page via a link in an accessible page in the app, nothing
 happens (well obviously cake is restricting access and then
 redirecting me to the referer which is the page I am already on)

 Ideally, I would like the option o being able to be redirected to an
 unauthorised notification page if I chose, but I want to be able to
 catch all of the above occurrences without hacking auth.php

 My simple solution is just to implement AppController::referer() to
 always return my unauthorised notification page - the cirucmstances I
 have found out of the box that result in it being used for a
 redirection meet my criteria, but this is obviously flaky testing, and
 also then restricts the possibility of me using referer for anything
 else in the app in the future.

 The second solution (currently) is adding extra logic to the login
 function (to catch some special case redirections), moving the
 authentication type to controller and implementing AppController
 isAuthorized() to basically manually pass the current data through to
 Acl::Check, but in the process, internally flagging up if an
 unauthorized page has been requested and no page had yet been rendered
 as a result of any redirects, and then using this flag in the
 implemented referer method to try and retain referer's standard
 behaviour wherever possible.

 This just seems really long winded, and as noted before, is going to
 be a nightmare to test for all possible scenarios of the use of app.

 Surely with the imminent release of 1.3 there should not have to be
 workarounds for such a fundamental component, or am I missing
 something?

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en

To unsubscribe, reply using remove me as the subject.

Re: SQL injection protect

2010-04-14 Thread Dmitry Shevchenko

Thank you for your help Sergei. It really helpfull.

I use this validation in many controllers, thats why I wrote component
for it.
I have too much urls in my project, where last parameter is  a digit -
unsigned int. And I need to validate it and show error message to user
if parameter is wrong.

I don't know better way to validate it :(

On Apr 14, 4:01 am, Sergei yatse...@gmail.com wrote:
 Dmitry,

 don't think, look at the source :)

 updateAll is exactly the answer. Your validation routine seems too
 heavy for one number. And you don't have to create a component to
 validate some data manually. You can always validate in controller.

 On Apr 14, 12:15 am, Dmitry Shevchenko dmitr...@gmail.com wrote:

  Sergei
  I think updateAll didn't sanitize data 
  -http://book.cakephp.org/view/75/Saving-Your-Data

  or I'm wrong?

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en

To unsubscribe, reply using remove me as the subject.

Re: News with Comments - how to sort by comments count?

2010-04-14 Thread WebbedIT

I would recommend using counterCache if regularly sorting data by
count, it's much more efficient hence why it;s included in Cake's
automagic.

http://book.cakephp.org/view/816/counterCache-Cache-your-count

HTH

Paul

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en

To unsubscribe, reply using remove me as the subject.

Re: need help saving cross reference table

2010-04-14 Thread WebbedIT

No problem :)

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en

To unsubscribe, reply using remove me as the subject.

CouchDB as a datasource

2010-04-14 Thread Martin Kirchgessner

Hi everyone,

As a year-old CakePHP user (by the way : huge congrats to the core
team for keeping up such a pretty framework!) I'm considering to
replace MySQL by CouchDB. I had a dream where some unpredictable data
wouldn't require ugly schemas :)

So far I tried gwoo's datasource (http://bin.cakephp.org/view/
925615535 - see also the original topic [1])
This is a good start but it assumes that a couchDB database is the
counterpart of MySQL tables. I don't think so, as it's usual in
CouchDB to put a type field in documents : then the counterpart of
the table is rather a couch view (or sometimes show or list) which
picks up document sets. A CouchDB view sound like a good counterpart
to find('all', ...)

I tried to rewrite a datasource (if needed I can publish it on cakebin
today), keeping in mind that it would be tied to a single couchdb
database. BUT I found out that schemas are deeply implemented in the
Model class :/ so Cake started to call my source's listSources,
describe and column methods. Of course I couldn't implement these
methods as my DB doesn't have schemas... I tried to set useTable to
false in the Model but then it won't save anything.

So I'm stuck between a normal CouchDB use (a single DB for my whole
app + calls to views in mind) which doesn't seem cake-friendly and a
working datasource that puts some constraints on DB design.
That's why I would like to discuss it here. Any comments are welcome!

Martin

[1] original topic about cake+couch :
http://groups.google.com/group/cake-php/browse_thread/thread/f0eaa55149d7ddb3/bff40dbc700171f9

Check out the new CakePHP Questions site http://cakeqs.org and help others with
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at
http://groups.google.com/group/cake-php?hl=en

50 matches

Mail list logo