Re: Social Portal Demo developed in Cakephp

2009-12-01 Thread j0n4s.h4rtm...@googlemail.com
(not the zip file, the whole directory with any files).

I suggest you should (re)read chapter 1-3 of the book at least, and
then see what ad7six and teknoid wrote about SecurityComponent on
their blogs (try google)

On Nov 30, 4:39 pm, crisuwork maran.e...@gmail.com wrote:
 Hi Dave,
 I import the code of app in repository folder.

 On 30 Nov., 16:07, crisuwork maran.e...@gmail.com wrote:

  I don't know how to import the code to the subversion repository. I
  don't see any option for that. Can you give me some tips for that
  action?

  On 30 Nov., 15:11, Dave davidcr...@gmail.com wrote:

   crisuwork will you import the code to the subversion repository please?

   thank you

   On Mon, Nov 30, 2009 at 6:06 AM, crisuwork maran.e...@gmail.com wrote:
 I try to learn and to use cakephp in the right way. This is just a
base general code and I am trying to improve it. Especially I am
interested in the vulnerable side and ways to fix this. Thanks for
feedback and suggestions. :)

On 30 Nov., 11:48, j0n4s.h4rtm...@googlemail.com
j0n4s.h4rtm...@googlemail.com wrote:
 Hello,

 my suggestions are:
 - clean your code from outcommented waste/old stuff (its just much)
 - use cake's ORM instad of query()
 - use cake errors or session-setFlash instead of render('errors/
 blah')
 - docblocks make no sense if you do not describe the usage of the
 method or the meaning of the parameters
 - your application is probably highly vulnerable: a.) no usage of ORM
 at some places, direct insertion of ID into query, no idea if it gets
 escaped (try model-escapeField(), if you really want to stick with
 query()) b.) no use of securitycomponent, did not notice anything
 equal

 On Nov 30, 12:07 am, crisuwork maran.e...@gmail.com wrote:

  A Social Portal Demo developed in Cakephp giving You possibility to
  save your favorite music songs from Youtube by categories. Cakephp
  core version used is 1.2x. The purpose of this application is 
  teaching
  and understand how Cakephp it works. Available options: Register,
  Login, Profile Modify, Add song by Category.

  Demo:http://eopp.de
  Download source fromhttp://code.google.com/p/marancakemelody/

  Any suggestions are welcome.

Check out the new CakePHP Questions sitehttp://cakeqs.organdhelpothers
with their CakePHP related questions.

You received this message because you are subscribed to the Google 
Groups
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.comcake-php%2bunsubscr...@googlegroups.comFor
 more options, visit this group at
   http://groups.google.com/group/cake-php?hl=en

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en


Re: Social Portal Demo developed in Cakephp

2009-11-30 Thread j0n4s.h4rtm...@googlemail.com
Hello,

my suggestions are:
- clean your code from outcommented waste/old stuff (its just much)
- use cake's ORM instad of query()
- use cake errors or session-setFlash instead of render('errors/
blah')
- docblocks make no sense if you do not describe the usage of the
method or the meaning of the parameters
- your application is probably highly vulnerable: a.) no usage of ORM
at some places, direct insertion of ID into query, no idea if it gets
escaped (try model-escapeField(), if you really want to stick with
query()) b.) no use of securitycomponent, did not notice anything
equal

On Nov 30, 12:07 am, crisuwork maran.e...@gmail.com wrote:
 A Social Portal Demo developed in Cakephp giving You possibility to
 save your favorite music songs from Youtube by categories. Cakephp
 core version used is 1.2x. The purpose of this application is teaching
 and understand how Cakephp it works. Available options: Register,
 Login, Profile Modify, Add song by Category.

 Demo:http://eopp.de
 Download source fromhttp://code.google.com/p/marancakemelody/

 Any suggestions are welcome.

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en


Re: Social Portal Demo developed in Cakephp

2009-11-30 Thread crisuwork
 I try to learn and to use cakephp in the right way. This is just a
base general code and I am trying to improve it. Especially I am
interested in the vulnerable side and ways to fix this. Thanks for
feedback and suggestions. :)

On 30 Nov., 11:48, j0n4s.h4rtm...@googlemail.com
j0n4s.h4rtm...@googlemail.com wrote:
 Hello,

 my suggestions are:
 - clean your code from outcommented waste/old stuff (its just much)
 - use cake's ORM instad of query()
 - use cake errors or session-setFlash instead of render('errors/
 blah')
 - docblocks make no sense if you do not describe the usage of the
 method or the meaning of the parameters
 - your application is probably highly vulnerable: a.) no usage of ORM
 at some places, direct insertion of ID into query, no idea if it gets
 escaped (try model-escapeField(), if you really want to stick with
 query()) b.) no use of securitycomponent, did not notice anything
 equal

 On Nov 30, 12:07 am, crisuwork maran.e...@gmail.com wrote:

  A Social Portal Demo developed in Cakephp giving You possibility to
  save your favorite music songs from Youtube by categories. Cakephp
  core version used is 1.2x. The purpose of this application is teaching
  and understand how Cakephp it works. Available options: Register,
  Login, Profile Modify, Add song by Category.

  Demo:http://eopp.de
  Download source fromhttp://code.google.com/p/marancakemelody/

  Any suggestions are welcome.

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en


Re: Social Portal Demo developed in Cakephp

2009-11-30 Thread Dave
crisuwork will you import the code to the subversion repository please?

thank you

On Mon, Nov 30, 2009 at 6:06 AM, crisuwork maran.e...@gmail.com wrote:

  I try to learn and to use cakephp in the right way. This is just a
 base general code and I am trying to improve it. Especially I am
 interested in the vulnerable side and ways to fix this. Thanks for
 feedback and suggestions. :)

 On 30 Nov., 11:48, j0n4s.h4rtm...@googlemail.com
 j0n4s.h4rtm...@googlemail.com wrote:
  Hello,
 
  my suggestions are:
  - clean your code from outcommented waste/old stuff (its just much)
  - use cake's ORM instad of query()
  - use cake errors or session-setFlash instead of render('errors/
  blah')
  - docblocks make no sense if you do not describe the usage of the
  method or the meaning of the parameters
  - your application is probably highly vulnerable: a.) no usage of ORM
  at some places, direct insertion of ID into query, no idea if it gets
  escaped (try model-escapeField(), if you really want to stick with
  query()) b.) no use of securitycomponent, did not notice anything
  equal
 
  On Nov 30, 12:07 am, crisuwork maran.e...@gmail.com wrote:
 
   A Social Portal Demo developed in Cakephp giving You possibility to
   save your favorite music songs from Youtube by categories. Cakephp
   core version used is 1.2x. The purpose of this application is teaching
   and understand how Cakephp it works. Available options: Register,
   Login, Profile Modify, Add song by Category.
 
   Demo:http://eopp.de
   Download source fromhttp://code.google.com/p/marancakemelody/
 
   Any suggestions are welcome.

 Check out the new CakePHP Questions site http://cakeqs.org and help others
 with their CakePHP related questions.

 You received this message because you are subscribed to the Google Groups
 CakePHP group.
 To post to this group, send email to cake-php@googlegroups.com
 To unsubscribe from this group, send email to
 cake-php+unsubscr...@googlegroups.comcake-php%2bunsubscr...@googlegroups.comFor
  more options, visit this group at
 http://groups.google.com/group/cake-php?hl=en


Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en


Re: Social Portal Demo developed in Cakephp

2009-11-30 Thread crisuwork
I don't know how to import the code to the subversion repository. I
don't see any option for that. Can you give me some tips for that
action?

On 30 Nov., 15:11, Dave davidcr...@gmail.com wrote:
 crisuwork will you import the code to the subversion repository please?

 thank you

 On Mon, Nov 30, 2009 at 6:06 AM, crisuwork maran.e...@gmail.com wrote:
   I try to learn and to use cakephp in the right way. This is just a
  base general code and I am trying to improve it. Especially I am
  interested in the vulnerable side and ways to fix this. Thanks for
  feedback and suggestions. :)

  On 30 Nov., 11:48, j0n4s.h4rtm...@googlemail.com
  j0n4s.h4rtm...@googlemail.com wrote:
   Hello,

   my suggestions are:
   - clean your code from outcommented waste/old stuff (its just much)
   - use cake's ORM instad of query()
   - use cake errors or session-setFlash instead of render('errors/
   blah')
   - docblocks make no sense if you do not describe the usage of the
   method or the meaning of the parameters
   - your application is probably highly vulnerable: a.) no usage of ORM
   at some places, direct insertion of ID into query, no idea if it gets
   escaped (try model-escapeField(), if you really want to stick with
   query()) b.) no use of securitycomponent, did not notice anything
   equal

   On Nov 30, 12:07 am, crisuwork maran.e...@gmail.com wrote:

A Social Portal Demo developed in Cakephp giving You possibility to
save your favorite music songs from Youtube by categories. Cakephp
core version used is 1.2x. The purpose of this application is teaching
and understand how Cakephp it works. Available options: Register,
Login, Profile Modify, Add song by Category.

Demo:http://eopp.de
Download source fromhttp://code.google.com/p/marancakemelody/

Any suggestions are welcome.

  Check out the new CakePHP Questions sitehttp://cakeqs.organd help others
  with their CakePHP related questions.

  You received this message because you are subscribed to the Google Groups
  CakePHP group.
  To post to this group, send email to cake-php@googlegroups.com
  To unsubscribe from this group, send email to
  cake-php+unsubscr...@googlegroups.comcake-php%2bunsubscr...@googlegroups.comFor
   more options, visit this group at
 http://groups.google.com/group/cake-php?hl=en

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en


Re: Social Portal Demo developed in Cakephp

2009-11-30 Thread crisuwork
Hi Dave,
I import the code of app in repository folder.

On 30 Nov., 16:07, crisuwork maran.e...@gmail.com wrote:
 I don't know how to import the code to the subversion repository. I
 don't see any option for that. Can you give me some tips for that
 action?

 On 30 Nov., 15:11, Dave davidcr...@gmail.com wrote:

  crisuwork will you import the code to the subversion repository please?

  thank you

  On Mon, Nov 30, 2009 at 6:06 AM, crisuwork maran.e...@gmail.com wrote:
    I try to learn and to use cakephp in the right way. This is just a
   base general code and I am trying to improve it. Especially I am
   interested in the vulnerable side and ways to fix this. Thanks for
   feedback and suggestions. :)

   On 30 Nov., 11:48, j0n4s.h4rtm...@googlemail.com
   j0n4s.h4rtm...@googlemail.com wrote:
Hello,

my suggestions are:
- clean your code from outcommented waste/old stuff (its just much)
- use cake's ORM instad of query()
- use cake errors or session-setFlash instead of render('errors/
blah')
- docblocks make no sense if you do not describe the usage of the
method or the meaning of the parameters
- your application is probably highly vulnerable: a.) no usage of ORM
at some places, direct insertion of ID into query, no idea if it gets
escaped (try model-escapeField(), if you really want to stick with
query()) b.) no use of securitycomponent, did not notice anything
equal

On Nov 30, 12:07 am, crisuwork maran.e...@gmail.com wrote:

 A Social Portal Demo developed in Cakephp giving You possibility to
 save your favorite music songs from Youtube by categories. Cakephp
 core version used is 1.2x. The purpose of this application is teaching
 and understand how Cakephp it works. Available options: Register,
 Login, Profile Modify, Add song by Category.

 Demo:http://eopp.de
 Download source fromhttp://code.google.com/p/marancakemelody/

 Any suggestions are welcome.

   Check out the new CakePHP Questions sitehttp://cakeqs.organdhelp others
   with their CakePHP related questions.

   You received this message because you are subscribed to the Google Groups
   CakePHP group.
   To post to this group, send email to cake-php@googlegroups.com
   To unsubscribe from this group, send email to
   cake-php+unsubscr...@googlegroups.comcake-php%2bunsubscr...@googlegroups.comFor
more options, visit this group at
  http://groups.google.com/group/cake-php?hl=en

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en


Social Portal Demo developed in Cakephp

2009-11-29 Thread crisuwork
A Social Portal Demo developed in Cakephp giving You possibility to
save your favorite music songs from Youtube by categories. Cakephp
core version used is 1.2x. The purpose of this application is teaching
and understand how Cakephp it works. Available options: Register,
Login, Profile Modify, Add song by Category.

Demo: http://eopp.de
Download source from http://code.google.com/p/marancakemelody/

Any suggestions are welcome.

Check out the new CakePHP Questions site http://cakeqs.org and help others with 
their CakePHP related questions.

You received this message because you are subscribed to the Google Groups 
CakePHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscr...@googlegroups.com For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en