Re: Social Portal Demo developed in Cakephp
(not the zip file, the whole directory with any files). I suggest you should (re)read chapter 1-3 of the book at least, and then see what ad7six and teknoid wrote about SecurityComponent on their blogs (try google) On Nov 30, 4:39 pm, crisuwork wrote: > Hi Dave, > I import the code of app in repository folder. > > On 30 Nov., 16:07, crisuwork wrote: > > > I don't know how to import the code to the subversion repository. I > > don't see any option for that. Can you give me some tips for that > > action? > > > On 30 Nov., 15:11, Dave wrote: > > > > crisuwork will you import the code to the subversion repository please? > > > > thank you > > > > On Mon, Nov 30, 2009 at 6:06 AM, crisuwork wrote: > > > > I try to learn and to use cakephp in the right way. This is just a > > > > base general code and I am trying to improve it. Especially I am > > > > interested in the vulnerable side and ways to fix this. Thanks for > > > > feedback and suggestions. :) > > > > > On 30 Nov., 11:48, "j0n4s.h4rtm...@googlemail.com" > > > > wrote: > > > > > Hello, > > > > > > my suggestions are: > > > > > - clean your code from outcommented waste/old stuff (its just much) > > > > > - use cake's ORM instad of query() > > > > > - use cake errors or session->setFlash instead of render('errors/ > > > > > blah') > > > > > - docblocks make no sense if you do not describe the usage of the > > > > > method or the meaning of the parameters > > > > > - your application is probably highly vulnerable: a.) no usage of ORM > > > > > at some places, direct insertion of ID into query, no idea if it gets > > > > > escaped (try model->escapeField(), if you really want to stick with > > > > > query()) b.) no use of securitycomponent, did not notice anything > > > > > equal > > > > > > On Nov 30, 12:07 am, crisuwork wrote: > > > > > > > A Social Portal Demo developed in Cakephp giving You possibility to > > > > > > save your favorite music songs from Youtube by categories. Cakephp > > > > > > core version used is 1.2x. The purpose of this application is > > > > > > teaching > > > > > > and understand how Cakephp it works. Available options: Register, > > > > > > Login, Profile Modify, Add song by Category. > > > > > > > Demo:http://eopp.de > > > > > > Download source fromhttp://code.google.com/p/marancakemelody/ > > > > > > > Any suggestions are welcome. > > > > > Check out the new CakePHP Questions sitehttp://cakeqs.organdhelpothers > > > > with their CakePHP related questions. > > > > > You received this message because you are subscribed to the Google > > > > Groups > > > > "CakePHP" group. > > > > To post to this group, send email to cake-php@googlegroups.com > > > > To unsubscribe from this group, send email to > > > > cake-php+unsubscr...@googlegroups.comFor > > > > more options, visit this group at > > > >http://groups.google.com/group/cake-php?hl=en Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
Re: Social Portal Demo developed in Cakephp
Hi Dave, I import the code of app in repository folder. On 30 Nov., 16:07, crisuwork wrote: > I don't know how to import the code to the subversion repository. I > don't see any option for that. Can you give me some tips for that > action? > > On 30 Nov., 15:11, Dave wrote: > > > crisuwork will you import the code to the subversion repository please? > > > thank you > > > On Mon, Nov 30, 2009 at 6:06 AM, crisuwork wrote: > > > I try to learn and to use cakephp in the right way. This is just a > > > base general code and I am trying to improve it. Especially I am > > > interested in the vulnerable side and ways to fix this. Thanks for > > > feedback and suggestions. :) > > > > On 30 Nov., 11:48, "j0n4s.h4rtm...@googlemail.com" > > > wrote: > > > > Hello, > > > > > my suggestions are: > > > > - clean your code from outcommented waste/old stuff (its just much) > > > > - use cake's ORM instad of query() > > > > - use cake errors or session->setFlash instead of render('errors/ > > > > blah') > > > > - docblocks make no sense if you do not describe the usage of the > > > > method or the meaning of the parameters > > > > - your application is probably highly vulnerable: a.) no usage of ORM > > > > at some places, direct insertion of ID into query, no idea if it gets > > > > escaped (try model->escapeField(), if you really want to stick with > > > > query()) b.) no use of securitycomponent, did not notice anything > > > > equal > > > > > On Nov 30, 12:07 am, crisuwork wrote: > > > > > > A Social Portal Demo developed in Cakephp giving You possibility to > > > > > save your favorite music songs from Youtube by categories. Cakephp > > > > > core version used is 1.2x. The purpose of this application is teaching > > > > > and understand how Cakephp it works. Available options: Register, > > > > > Login, Profile Modify, Add song by Category. > > > > > > Demo:http://eopp.de > > > > > Download source fromhttp://code.google.com/p/marancakemelody/ > > > > > > Any suggestions are welcome. > > > > Check out the new CakePHP Questions sitehttp://cakeqs.organdhelp others > > > with their CakePHP related questions. > > > > You received this message because you are subscribed to the Google Groups > > > "CakePHP" group. > > > To post to this group, send email to cake-php@googlegroups.com > > > To unsubscribe from this group, send email to > > > cake-php+unsubscr...@googlegroups.comFor > > > more options, visit this group at > > >http://groups.google.com/group/cake-php?hl=en Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
Re: Social Portal Demo developed in Cakephp
I don't know how to import the code to the subversion repository. I don't see any option for that. Can you give me some tips for that action? On 30 Nov., 15:11, Dave wrote: > crisuwork will you import the code to the subversion repository please? > > thank you > > On Mon, Nov 30, 2009 at 6:06 AM, crisuwork wrote: > > I try to learn and to use cakephp in the right way. This is just a > > base general code and I am trying to improve it. Especially I am > > interested in the vulnerable side and ways to fix this. Thanks for > > feedback and suggestions. :) > > > On 30 Nov., 11:48, "j0n4s.h4rtm...@googlemail.com" > > wrote: > > > Hello, > > > > my suggestions are: > > > - clean your code from outcommented waste/old stuff (its just much) > > > - use cake's ORM instad of query() > > > - use cake errors or session->setFlash instead of render('errors/ > > > blah') > > > - docblocks make no sense if you do not describe the usage of the > > > method or the meaning of the parameters > > > - your application is probably highly vulnerable: a.) no usage of ORM > > > at some places, direct insertion of ID into query, no idea if it gets > > > escaped (try model->escapeField(), if you really want to stick with > > > query()) b.) no use of securitycomponent, did not notice anything > > > equal > > > > On Nov 30, 12:07 am, crisuwork wrote: > > > > > A Social Portal Demo developed in Cakephp giving You possibility to > > > > save your favorite music songs from Youtube by categories. Cakephp > > > > core version used is 1.2x. The purpose of this application is teaching > > > > and understand how Cakephp it works. Available options: Register, > > > > Login, Profile Modify, Add song by Category. > > > > > Demo:http://eopp.de > > > > Download source fromhttp://code.google.com/p/marancakemelody/ > > > > > Any suggestions are welcome. > > > Check out the new CakePHP Questions sitehttp://cakeqs.organd help others > > with their CakePHP related questions. > > > You received this message because you are subscribed to the Google Groups > > "CakePHP" group. > > To post to this group, send email to cake-php@googlegroups.com > > To unsubscribe from this group, send email to > > cake-php+unsubscr...@googlegroups.comFor > > more options, visit this group at > >http://groups.google.com/group/cake-php?hl=en Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
Re: Social Portal Demo developed in Cakephp
crisuwork will you import the code to the subversion repository please? thank you On Mon, Nov 30, 2009 at 6:06 AM, crisuwork wrote: > I try to learn and to use cakephp in the right way. This is just a > base general code and I am trying to improve it. Especially I am > interested in the vulnerable side and ways to fix this. Thanks for > feedback and suggestions. :) > > On 30 Nov., 11:48, "j0n4s.h4rtm...@googlemail.com" > wrote: > > Hello, > > > > my suggestions are: > > - clean your code from outcommented waste/old stuff (its just much) > > - use cake's ORM instad of query() > > - use cake errors or session->setFlash instead of render('errors/ > > blah') > > - docblocks make no sense if you do not describe the usage of the > > method or the meaning of the parameters > > - your application is probably highly vulnerable: a.) no usage of ORM > > at some places, direct insertion of ID into query, no idea if it gets > > escaped (try model->escapeField(), if you really want to stick with > > query()) b.) no use of securitycomponent, did not notice anything > > equal > > > > On Nov 30, 12:07 am, crisuwork wrote: > > > > > A Social Portal Demo developed in Cakephp giving You possibility to > > > save your favorite music songs from Youtube by categories. Cakephp > > > core version used is 1.2x. The purpose of this application is teaching > > > and understand how Cakephp it works. Available options: Register, > > > Login, Profile Modify, Add song by Category. > > > > > Demo:http://eopp.de > > > Download source fromhttp://code.google.com/p/marancakemelody/ > > > > > Any suggestions are welcome. > > Check out the new CakePHP Questions site http://cakeqs.org and help others > with their CakePHP related questions. > > You received this message because you are subscribed to the Google Groups > "CakePHP" group. > To post to this group, send email to cake-php@googlegroups.com > To unsubscribe from this group, send email to > cake-php+unsubscr...@googlegroups.comFor > more options, visit this group at > http://groups.google.com/group/cake-php?hl=en > Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
Re: Social Portal Demo developed in Cakephp
I try to learn and to use cakephp in the right way. This is just a base general code and I am trying to improve it. Especially I am interested in the vulnerable side and ways to fix this. Thanks for feedback and suggestions. :) On 30 Nov., 11:48, "j0n4s.h4rtm...@googlemail.com" wrote: > Hello, > > my suggestions are: > - clean your code from outcommented waste/old stuff (its just much) > - use cake's ORM instad of query() > - use cake errors or session->setFlash instead of render('errors/ > blah') > - docblocks make no sense if you do not describe the usage of the > method or the meaning of the parameters > - your application is probably highly vulnerable: a.) no usage of ORM > at some places, direct insertion of ID into query, no idea if it gets > escaped (try model->escapeField(), if you really want to stick with > query()) b.) no use of securitycomponent, did not notice anything > equal > > On Nov 30, 12:07 am, crisuwork wrote: > > > A Social Portal Demo developed in Cakephp giving You possibility to > > save your favorite music songs from Youtube by categories. Cakephp > > core version used is 1.2x. The purpose of this application is teaching > > and understand how Cakephp it works. Available options: Register, > > Login, Profile Modify, Add song by Category. > > > Demo:http://eopp.de > > Download source fromhttp://code.google.com/p/marancakemelody/ > > > Any suggestions are welcome. Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
Re: Social Portal Demo developed in Cakephp
Hello, my suggestions are: - clean your code from outcommented waste/old stuff (its just much) - use cake's ORM instad of query() - use cake errors or session->setFlash instead of render('errors/ blah') - docblocks make no sense if you do not describe the usage of the method or the meaning of the parameters - your application is probably highly vulnerable: a.) no usage of ORM at some places, direct insertion of ID into query, no idea if it gets escaped (try model->escapeField(), if you really want to stick with query()) b.) no use of securitycomponent, did not notice anything equal On Nov 30, 12:07 am, crisuwork wrote: > A Social Portal Demo developed in Cakephp giving You possibility to > save your favorite music songs from Youtube by categories. Cakephp > core version used is 1.2x. The purpose of this application is teaching > and understand how Cakephp it works. Available options: Register, > Login, Profile Modify, Add song by Category. > > Demo:http://eopp.de > Download source fromhttp://code.google.com/p/marancakemelody/ > > Any suggestions are welcome. Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en