Re: Social Portal Demo developed in Cakephp
(not the zip file, the whole directory with any files). I suggest you should (re)read chapter 1-3 of the book at least, and then see what ad7six and teknoid wrote about SecurityComponent on their blogs (try google) On Nov 30, 4:39 pm, crisuwork maran.e...@gmail.com wrote: Hi Dave, I import the code of app in repository folder. On 30 Nov., 16:07, crisuwork maran.e...@gmail.com wrote: I don't know how to import the code to the subversion repository. I don't see any option for that. Can you give me some tips for that action? On 30 Nov., 15:11, Dave davidcr...@gmail.com wrote: crisuwork will you import the code to the subversion repository please? thank you On Mon, Nov 30, 2009 at 6:06 AM, crisuwork maran.e...@gmail.com wrote: I try to learn and to use cakephp in the right way. This is just a base general code and I am trying to improve it. Especially I am interested in the vulnerable side and ways to fix this. Thanks for feedback and suggestions. :) On 30 Nov., 11:48, j0n4s.h4rtm...@googlemail.com j0n4s.h4rtm...@googlemail.com wrote: Hello, my suggestions are: - clean your code from outcommented waste/old stuff (its just much) - use cake's ORM instad of query() - use cake errors or session-setFlash instead of render('errors/ blah') - docblocks make no sense if you do not describe the usage of the method or the meaning of the parameters - your application is probably highly vulnerable: a.) no usage of ORM at some places, direct insertion of ID into query, no idea if it gets escaped (try model-escapeField(), if you really want to stick with query()) b.) no use of securitycomponent, did not notice anything equal On Nov 30, 12:07 am, crisuwork maran.e...@gmail.com wrote: A Social Portal Demo developed in Cakephp giving You possibility to save your favorite music songs from Youtube by categories. Cakephp core version used is 1.2x. The purpose of this application is teaching and understand how Cakephp it works. Available options: Register, Login, Profile Modify, Add song by Category. Demo:http://eopp.de Download source fromhttp://code.google.com/p/marancakemelody/ Any suggestions are welcome. Check out the new CakePHP Questions sitehttp://cakeqs.organdhelpothers with their CakePHP related questions. You received this message because you are subscribed to the Google Groups CakePHP group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.comcake-php%2bunsubscr...@googlegroups.comFor more options, visit this group at http://groups.google.com/group/cake-php?hl=en Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups CakePHP group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
Re: Social Portal Demo developed in Cakephp
Hello, my suggestions are: - clean your code from outcommented waste/old stuff (its just much) - use cake's ORM instad of query() - use cake errors or session-setFlash instead of render('errors/ blah') - docblocks make no sense if you do not describe the usage of the method or the meaning of the parameters - your application is probably highly vulnerable: a.) no usage of ORM at some places, direct insertion of ID into query, no idea if it gets escaped (try model-escapeField(), if you really want to stick with query()) b.) no use of securitycomponent, did not notice anything equal On Nov 30, 12:07 am, crisuwork maran.e...@gmail.com wrote: A Social Portal Demo developed in Cakephp giving You possibility to save your favorite music songs from Youtube by categories. Cakephp core version used is 1.2x. The purpose of this application is teaching and understand how Cakephp it works. Available options: Register, Login, Profile Modify, Add song by Category. Demo:http://eopp.de Download source fromhttp://code.google.com/p/marancakemelody/ Any suggestions are welcome. Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups CakePHP group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
Re: Social Portal Demo developed in Cakephp
I try to learn and to use cakephp in the right way. This is just a base general code and I am trying to improve it. Especially I am interested in the vulnerable side and ways to fix this. Thanks for feedback and suggestions. :) On 30 Nov., 11:48, j0n4s.h4rtm...@googlemail.com j0n4s.h4rtm...@googlemail.com wrote: Hello, my suggestions are: - clean your code from outcommented waste/old stuff (its just much) - use cake's ORM instad of query() - use cake errors or session-setFlash instead of render('errors/ blah') - docblocks make no sense if you do not describe the usage of the method or the meaning of the parameters - your application is probably highly vulnerable: a.) no usage of ORM at some places, direct insertion of ID into query, no idea if it gets escaped (try model-escapeField(), if you really want to stick with query()) b.) no use of securitycomponent, did not notice anything equal On Nov 30, 12:07 am, crisuwork maran.e...@gmail.com wrote: A Social Portal Demo developed in Cakephp giving You possibility to save your favorite music songs from Youtube by categories. Cakephp core version used is 1.2x. The purpose of this application is teaching and understand how Cakephp it works. Available options: Register, Login, Profile Modify, Add song by Category. Demo:http://eopp.de Download source fromhttp://code.google.com/p/marancakemelody/ Any suggestions are welcome. Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups CakePHP group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
Re: Social Portal Demo developed in Cakephp
crisuwork will you import the code to the subversion repository please? thank you On Mon, Nov 30, 2009 at 6:06 AM, crisuwork maran.e...@gmail.com wrote: I try to learn and to use cakephp in the right way. This is just a base general code and I am trying to improve it. Especially I am interested in the vulnerable side and ways to fix this. Thanks for feedback and suggestions. :) On 30 Nov., 11:48, j0n4s.h4rtm...@googlemail.com j0n4s.h4rtm...@googlemail.com wrote: Hello, my suggestions are: - clean your code from outcommented waste/old stuff (its just much) - use cake's ORM instad of query() - use cake errors or session-setFlash instead of render('errors/ blah') - docblocks make no sense if you do not describe the usage of the method or the meaning of the parameters - your application is probably highly vulnerable: a.) no usage of ORM at some places, direct insertion of ID into query, no idea if it gets escaped (try model-escapeField(), if you really want to stick with query()) b.) no use of securitycomponent, did not notice anything equal On Nov 30, 12:07 am, crisuwork maran.e...@gmail.com wrote: A Social Portal Demo developed in Cakephp giving You possibility to save your favorite music songs from Youtube by categories. Cakephp core version used is 1.2x. The purpose of this application is teaching and understand how Cakephp it works. Available options: Register, Login, Profile Modify, Add song by Category. Demo:http://eopp.de Download source fromhttp://code.google.com/p/marancakemelody/ Any suggestions are welcome. Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups CakePHP group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.comcake-php%2bunsubscr...@googlegroups.comFor more options, visit this group at http://groups.google.com/group/cake-php?hl=en Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups CakePHP group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
Re: Social Portal Demo developed in Cakephp
I don't know how to import the code to the subversion repository. I don't see any option for that. Can you give me some tips for that action? On 30 Nov., 15:11, Dave davidcr...@gmail.com wrote: crisuwork will you import the code to the subversion repository please? thank you On Mon, Nov 30, 2009 at 6:06 AM, crisuwork maran.e...@gmail.com wrote: I try to learn and to use cakephp in the right way. This is just a base general code and I am trying to improve it. Especially I am interested in the vulnerable side and ways to fix this. Thanks for feedback and suggestions. :) On 30 Nov., 11:48, j0n4s.h4rtm...@googlemail.com j0n4s.h4rtm...@googlemail.com wrote: Hello, my suggestions are: - clean your code from outcommented waste/old stuff (its just much) - use cake's ORM instad of query() - use cake errors or session-setFlash instead of render('errors/ blah') - docblocks make no sense if you do not describe the usage of the method or the meaning of the parameters - your application is probably highly vulnerable: a.) no usage of ORM at some places, direct insertion of ID into query, no idea if it gets escaped (try model-escapeField(), if you really want to stick with query()) b.) no use of securitycomponent, did not notice anything equal On Nov 30, 12:07 am, crisuwork maran.e...@gmail.com wrote: A Social Portal Demo developed in Cakephp giving You possibility to save your favorite music songs from Youtube by categories. Cakephp core version used is 1.2x. The purpose of this application is teaching and understand how Cakephp it works. Available options: Register, Login, Profile Modify, Add song by Category. Demo:http://eopp.de Download source fromhttp://code.google.com/p/marancakemelody/ Any suggestions are welcome. Check out the new CakePHP Questions sitehttp://cakeqs.organd help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups CakePHP group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.comcake-php%2bunsubscr...@googlegroups.comFor more options, visit this group at http://groups.google.com/group/cake-php?hl=en Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups CakePHP group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
Re: Social Portal Demo developed in Cakephp
Hi Dave, I import the code of app in repository folder. On 30 Nov., 16:07, crisuwork maran.e...@gmail.com wrote: I don't know how to import the code to the subversion repository. I don't see any option for that. Can you give me some tips for that action? On 30 Nov., 15:11, Dave davidcr...@gmail.com wrote: crisuwork will you import the code to the subversion repository please? thank you On Mon, Nov 30, 2009 at 6:06 AM, crisuwork maran.e...@gmail.com wrote: I try to learn and to use cakephp in the right way. This is just a base general code and I am trying to improve it. Especially I am interested in the vulnerable side and ways to fix this. Thanks for feedback and suggestions. :) On 30 Nov., 11:48, j0n4s.h4rtm...@googlemail.com j0n4s.h4rtm...@googlemail.com wrote: Hello, my suggestions are: - clean your code from outcommented waste/old stuff (its just much) - use cake's ORM instad of query() - use cake errors or session-setFlash instead of render('errors/ blah') - docblocks make no sense if you do not describe the usage of the method or the meaning of the parameters - your application is probably highly vulnerable: a.) no usage of ORM at some places, direct insertion of ID into query, no idea if it gets escaped (try model-escapeField(), if you really want to stick with query()) b.) no use of securitycomponent, did not notice anything equal On Nov 30, 12:07 am, crisuwork maran.e...@gmail.com wrote: A Social Portal Demo developed in Cakephp giving You possibility to save your favorite music songs from Youtube by categories. Cakephp core version used is 1.2x. The purpose of this application is teaching and understand how Cakephp it works. Available options: Register, Login, Profile Modify, Add song by Category. Demo:http://eopp.de Download source fromhttp://code.google.com/p/marancakemelody/ Any suggestions are welcome. Check out the new CakePHP Questions sitehttp://cakeqs.organdhelp others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups CakePHP group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.comcake-php%2bunsubscr...@googlegroups.comFor more options, visit this group at http://groups.google.com/group/cake-php?hl=en Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups CakePHP group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
Social Portal Demo developed in Cakephp
A Social Portal Demo developed in Cakephp giving You possibility to save your favorite music songs from Youtube by categories. Cakephp core version used is 1.2x. The purpose of this application is teaching and understand how Cakephp it works. Available options: Register, Login, Profile Modify, Add song by Category. Demo: http://eopp.de Download source from http://code.google.com/p/marancakemelody/ Any suggestions are welcome. Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions. You received this message because you are subscribed to the Google Groups CakePHP group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to cake-php+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en