othAuth problem solved with new version

2006-10-23 Thread yeastinflexion

it keeps popping up on the channel and the groups so i will mention
this issue again:
with the old othAuth v0.2 actions were being performed even though they
were restricted. i discovered the v0.5 code that othman accidentally
posted on the bakery and tried to get it working with the existing
helper/controller snippets and although it broke some other
functionality, and there is undocumented new features, it did appear to
solve the problem of actions being performed before being redirected to
the login page. obviously i doubt i am the only one eagerly awaiting
documentation for the new version of othAuth and associated helper.

i did also notice that if you declare restricted actions in the
app_controller AND a specific controller, you cannot simply do index,
add, delete, edit in the former and then tack on another action like
logout in the controller without redeclaring all the former as well. is
that right? i guess that is maybe just normal oo behavior and you are
over-writing the var? is that true of helper and component vars in cake
too then? i was never clear on that and it is probably a n00b question
i should get flamed for. please do. i thought OO behavior was the
opposite of that...

also, a workaround for this othAuth performing actions before redirect
problem i think could be discovered in cake's security component which
i have been reading about: requireAuth and requirePost ... and phpNut
once implied that it would probably go away if you simply used post
instead of get in the first place. i always planned to use something
like that anyway, i just didn't like that othAuth/beforeFilter had that
problem (i mean, pitfall for n00bs to have that problem) out of the box
and wanted to figure it out. again, it could have just been me, but
others seemed to have found that issue too...

anyway, i still love cake after a 2 month break and thanks to crazylegs
for his work on this component and everyone else who develops cake too.


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/cake-php
-~--~~~~--~~--~--~---



Re: Point of Sanitize->sql?

2006-07-20 Thread yeastinflexion

i thought php automatically addslashes to posted data?


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/cake-php
-~--~~~~--~~--~--~---



Re: strange othAuth problem

2006-07-17 Thread yeastinflexion

sigh. i spoke too soon. the actions are being performed regardless of
the if!/die statement. i wasn't refreshing phpMyAdmin. any other ideas?


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/cake-php
-~--~~~~--~~--~--~---



Re: strange othAuth problem

2006-07-17 Thread yeastinflexion

i was reading:
http://groups.google.com/group/cake-php/browse_thread/thread/5a4d967ba6c61b5a/b49aadf718b54165?q=beforefilter&rnum=3#b49aadf718b54165
...and it sounds like a similar problem. does that mean that code is
still being run for some reason even after the check has been
performed?

based on this assumption i think i solved this issue but i want to know
from CraZyLegs or anyone else who knows if this is an appropriate fix.
i had to encapsulate the check() call with a if (!check()) {die();} is
that appropriate? it solved the problem so maybe the installation
readme or the check function itself should be changed to stop running
code? or was i just supposed to think this was obvious (i know that a
lot of times code snippets are just rough examples, but many people use
the othAuth readmy verbatim so i'm concerned if this is a problem of
not adding an exit() then a lot of people might not be because i see a
lot of posted code that is exacly like mine -- no exit() -- and i was
having this problem and so was daxroc, maybe other people just haven't
tested it)


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/cake-php
-~--~~~~--~~--~--~---



Re: How to insert multiple rows with foreach loop...

2006-07-12 Thread yeastinflexion

awesome. i was stuck there too. thanks AD7six


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/cake-php
-~--~~~~--~~--~--~---



Re: strange othAuth problem

2006-07-11 Thread yeastinflexion

i also tested this with the $othAuthRestrictions applied to
app_controller or individual controllers... same effect.

does nobody else have this problem?


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/cake-php
-~--~~~~--~~--~--~---



Re: strange othAuth problem

2006-07-05 Thread yeastinflexion

i just discovered that there is another similar problem with any
action. for example, if you wait long enough for the session to expire,
but then you hit say, Save, the save will commit before you are
redirected to the login page.


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/cake-php
-~--~~~~--~~--~--~---



Re: strange othAuth problem

2006-07-01 Thread yeastinflexion

http://cakephp.org/pastes/show/e6bed617b04b2021f2d907dce2f87eaa


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/cake-php
-~--~~~~--~~--~--~---



strange othAuth problem

2006-06-30 Thread yeastinflexion

daxroc and i are both experiencing a strange problem with othAuth. i
believe we have everything implemented as per instructions and
everything works except one thing: when not logged in, you can call a
restricted action and that action will be performed before you are
redirected to the login page as long as the action didn't render a
view. strange eh? this is true even if a flash is added or even if
permissions are totally removed from the db. it doesn't happen on
actions that render views/elements, even if the render is to a file and
not to the browser. Does anyone else have this problem and does anyone
have a solution? CraZyLeGs?


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/cake-php
-~--~~~~--~~--~--~---