[symfony-users] Re: Primary Key Forgery Attack?
Hi Jeremy, Those Symfony / Propel generated forms are basic with no security. You will need to secure them based on the requirements of your project. You don't secure a record from unauthorized access by obscuring the ID, you actually have to check to make sure that a user is allowed to access particular record when they try to. Sid On Wed, Sep 2, 2009 at 5:55 PM, Jeremy Thomerson wrote: > > I have a question. In Symfony / Propel forms, when I am editing an > object, the primary key is a hidden field. I have verified that by > using Tamper Data (or anything of the nature), I can modify a > different row in the database (iow, someone else's information) by > simply changing the ID value in the HTTP submission. > > This is very bad default behavior. Is there a way to turn this off? > > I have come up with a way to overcome it - similar to the CSRF > protection. But I've hit one snag. Here's the thought: > > 1 - In BasePropelForm __construct, I add a field to the form that has > a hash of the form class, the primary key value, and some secret > internal salt (other things could be added). > > 2 - I add a validator to the primary key field of the form that > verifies that the value that comes in on submission also hashes out to > the hash that was in the form. > > This works in my tests. The only snag is that I can't find an > automated way of getting the primary key field name. Is there a way? > > Thanks, > Jeremy Thomerson > > > > --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] User group and permission in sfGuardPlugin
Dear all, I am currently a new symfony starter. Now I am in day 13 "The User", and I have a problem with user group and permission. The question is How can I give the credential to the group and how to enable it. Because when I try to create a different user in different group that have different permission. It always redirect to backend as a super administrator for normal user that i didn't tick as a super administrator it show me the message "You don't have the required permission to access this page.". Please kindly help me I really want your answers. Thanks in advance, Best regards, Veasna --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Plugin for Multiple Upload
Hi all, Anyone know any plugin available in symfony for multiple upload? I want to do that for multiple upload of pics for creating photo album like orkut and facebook.. Any Idea? Pls help me. Thanks in advance. --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: Plugin for Multiple Upload
Wrote this a few weeks ago: http://www.symfony-project.org/plugins/sfWidgetFormInputSWFUploadPlugin I'd be kind and helpful if you'd give it a try and help improve the javascripts/stylesheets for cross browser compatibility (think it works in major browsers >= IE6. If you browse the plugin page you'll find many more widgets and/or media related plugins, many of them provide multiple file upload capabilities in various ways. Have fun :) On 2 Sep., 10:25, Avani wrote: > Hi all, > > Anyone know any plugin available in symfony for multiple upload? I > want to do that for multiple upload of pics for creating photo album > like orkut and facebook.. > > Any Idea? Pls help me. > > Thanks in advance. --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: help on Virtual columns display in List view of symfony demo setup tutorial day 12
Hi I got to fix it as i was missing something: 'layout: stacked' On Sep 1, 6:12 pm, Eno wrote: > On Tue, 1 Sep 2009, 42 wrote: > > jobeet/1_2/Doctrine/en/12#chapter_12_sub_virtual_columns). I think I > > followed the guide as per described and changing in file 'apps\backend > > \modules\job\config\generator.yml'. But still job list in admin > > section appears tabular. > > Did you regenerate and clear cache? > > -- --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Xampp related issue
Hi, I know that Symfony Group is not a forum to ask this question but I am not getting help on this. I have installed XAMPP on linux. By default ssl is working so when run https://localhost it shows xampp screen. Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't work. Please help me in this regard. Thanks Deepak Bhatia --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: Xampp related issue
How do you know http://localhost stops working? Did you check apache/httpd error log? On Wed, Sep 2, 2009 at 10:54 PM, DEEPAK BHATIA wrote: > > Hi, > > I know that Symfony Group is not a forum to ask this question but I am > not getting help on this. > > I have installed XAMPP on linux. By default ssl is working so when run > https://localhost it shows xampp screen. > > Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't work. > > Please help me in this regard. > > Thanks > > Deepak Bhatia > > > > -- Blue Horn Ltd - System Development http://bluehorn.co.nz --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Newsletter plugin?
Hello, Is there a symfony newsletter plugin (no, I cannot find it...), has someone developed it or is someone interested in co-developing one for publication? Lambert --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: help with customizing sfguard
You have a typo in your template. $applicatonName is missing an i. On Sep 2, 12:42 am, jarthel wrote: > also, there's a topic about "Customize the sfGuardUser model". It > seems I can make changes to the schema.yml for "user profiles". Does > that mean I need to also make appropriate changes to my DB? > > thanks again --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: Xampp related issue
Hi, I get the error "425 HTTP Error :Unable to connect with remote host". But error_log in logs directory gives this below [Wed Sep 02 17:13:57 2009] [notice] Apache/2.2.11 (Unix) DAV/2 mod_ssl/2.2.11 OpenSSL/0.9.8i PHP/5.2.8 mod_apreq2-20051231/2.6.0 mod_perl/2.0.4 Perl/v5.10.0 configured -- resuming normal operations On Wed, Sep 2, 2009 at 4:30 PM, Sid Bachtiar wrote: > > How do you know http://localhost stops working? Did you check > apache/httpd error log? > > On Wed, Sep 2, 2009 at 10:54 PM, DEEPAK BHATIA wrote: >> >> Hi, >> >> I know that Symfony Group is not a forum to ask this question but I am >> not getting help on this. >> >> I have installed XAMPP on linux. By default ssl is working so when run >> https://localhost it shows xampp screen. >> >> Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't >> work. >> >> Please help me in this regard. >> >> Thanks >> >> Deepak Bhatia >> >> > >> > > > > -- > Blue Horn Ltd - System Development > http://bluehorn.co.nz > > > > --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Help Please! - Error with Jobeet
I´m new with symfony, and I´m trying to start with Jobeet but I have an error when trying to insert-sql with doctrine. I run the command below with this error: D:\AppServ\www\symfony\sfproject>symfony doctrine:build-sql >> doctrine generating sql for models While exporting model class 'JobeetAffiliate' to SQL: Couldn't locate driver n amed mysql D:\AppServ\www\symfony\sfproject> I´m stopped here. Please help me! Thanks! martin --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: Help Please! - Error with Jobeet
Are you sure you have pdo_mysql enabled in the php.ini your command line interface uses? On Wed, Sep 2, 2009 at 13:55, Martin - Digital Express wrote: > > I´m new with symfony, and I´m trying to start with Jobeet but I have > an error when trying to insert-sql with doctrine. > > I run the command below with this error: > > D:\AppServ\www\symfony\sfproject>symfony doctrine:build-sql >>> doctrine generating sql for models > > While exporting model class 'JobeetAffiliate' to SQL: Couldn't > locate driver n > amed mysql > > D:\AppServ\www\symfony\sfproject> > > I´m stopped here. Please help me! > > Thanks! > > martin > > > > --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: parameters in configure()
Eno escribió:
> On Tue, 1 Sep 2009, Germana Oliveira wrote:
>
>
>> BUT I HAVE TWO PROBLEMS:
>>
>> 1. with a new form (isNew):
>> Notice: Undefined offset: 0 in
>> /home/germana/www/indepabis/lib/form/PersonaForm.class.php on line 53
>>
>
> Were these form classes generated from models?
>
Yes, these clases are generated from models
> Also what does the code of PersonaForm.class.php look like? What is around
> line 53?
>
>
PersonaForm:
class PersonaForm extends BasePersonaForm
{
public function configure($object = null, $options = array())
{
parent::configure();
unset($this['id']);
$this->widgetSchema['direccion'] = new sfWidgetFormTextArea(array(),
array('cols' => '50', 'rows' => '2'));
$this->widgetSchema['estado_id'] = new sfWidgetFormPropelChoice(
array(
'model' => 'Estado',
'add_empty' => false,
'order_by' => array('Nombre', 'asc'),
)
);
$this->widgetSchema['municipio_id'] = new sfWidgetFormPropelChoice(
array(
'model' => 'Municipio',
'add_empty' => false,
'order_by'=> array('Nombre', 'asc'),
'criteria'=>
MunicipioPeer::criteriaMunicipio(EstadoPeer::obtenerPorNombre('Carabobo')->getId()),
)
);
$this->widgetSchema['parroquia_id'] = new
sfWidgetFormPropelChoice(array(
'model' => 'Parroquia',
'add_empty' => false,
'order_by'=> array('Nombre', 'asc'),
'criteria'=>
ParroquiaPeer::criteriaParroquia(EstadoPeer::obtenerPorNombre('Carabobo')->getId(),
MunicipioPeer::obtenerPorNombre('Valencia')->getId()),
));
$this->setDefault('estado_id',
EstadoPeer::obtenerPorNombre('Carabobo')->getId());
$this->setDefault('municipio_id',
MunicipioPeer::obtenerPorNombre('Valencia')->getId());
$tipo_persona = strtolower($options[0]); > LINE 52
$tipo_persona_id =
TipoPersonaPeer::obtenerPorNombre($tipo_persona)->getId();
$this->setDefault('tipo_persona_id', $tipo_persona_id);
$this->setValidators(array(
'nombre'=> new sfValidatorString(
array('required' => true, 'min_length'=> 3),
array('required' => 'Campo Requerido',
'min_length' => 'El nombre es muy corto')
),
'identificacion'=> new sfValidatorNumber(
array('required' => true),
array('required' => 'Campo Requerido',
'invalid' => 'Introduzca solo numeros')
),
'tipo_persona_id' => new sfValidatorPropelChoice(array('model'
=> 'TipoPersona', 'column' => 'id')),
'estado_id' => new sfValidatorPropelChoice(array('model'
=> 'Estado', 'column' => 'id')),
'municipio_id'=> new sfValidatorPropelChoice(array('model'
=> 'Municipio', 'column' => 'id')),
'parroquia_id'=> new sfValidatorPropelChoice(array('model'
=> 'Parroquia', 'column' => 'id')),
'tipo_identificacion' => new sfValidatorChoice(array('choices' =>
array('V-' => 'V', 'E-' => 'E', 'J-' => 'J'))),
'telefono' => new sfValidatorNumber(
array('required' => false),
array('invalid' => 'Introduzca solo numeros')
),
'direccion' => new sfValidatorString(
array('required' => true, 'min_length'=> 4),
array('required' => 'Campo Requerido',
'min_length' => 'La direccion es muy corta')
)
));
$this->widgetSchema->setLabels(array(
'tipo_persona_id' => 'Tipo de Persona',
));
}
}
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"symfony users" group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---
[symfony-users] Re: Newsletter plugin?
Lambert wrote: > Hello, > Is there a symfony newsletter plugin (no, I cannot find it...), has > someone developed it or is someone interested in co-developing one for > publication? > I could help you, just let me know what you need and what is my part here Cheers -- Ing. Reynier Pérez Mira --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] sfValidatorDate with min/max and date_format
I am using sfValidatorDate to check that a date is in the 'mm/dd/yy'
format. 'date_format' is causing Min and Max to fail. I believe the
failure is caused by the shortened year format.
How can I get the validator to enforce both the date format and the
min/max. I tried using the 'date_format' option.
$this->setValidator('start_date', new sfValidatorDate(
array(
'min' => mktime(0,0,0,1,1,date('y',time())),
'max' => mktime(0,0,0,12,31,date('y',time())+1),
'required' => true,
'date_format' => '/^[0-9]{2}\/[0-9]{2}\/[0-9]{2}$/',
'date_output'=>'m/d/y'
),array(
'min'=>'Must start this year',
'max'=>'Cannot span two years',
'bad_format'=>'Must be MM/DD/YY',
'required'=>'Start Date required')
));
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"symfony users" group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---
[symfony-users] Re: Help Please! - Error with Jobeet
On Wed, 2 Sep 2009, Martin - Digital Express wrote: > D:\AppServ\www\symfony\sfproject>symfony doctrine:build-sql > >> doctrine generating sql for models > > While exporting model class 'JobeetAffiliate' to SQL: Couldn't > locate driver n > amed mysql Looks like you dont have pdo_mysql in your PHP. On Mac/Linux, run this from a terminal window: php -m | egrep "[Pp][Dd][Oo]" to see if PDO is present/enabled. -- --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: Xampp related issue
On Wed, 2 Sep 2009, DEEPAK BHATIA wrote: > Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't work. To run without SSL, you run the 'stopssl' command above but then use just 'start' to start. -- --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: Xampp related issue
Thanks Actually I am accessing the linux machine through telnet and doing stopssl and then start. Now when I run http://10.0.1.66, I get the error that 425 HTTP Error, Unable to connect with remote host. Thanks On Wed, Sep 2, 2009 at 7:23 PM, Eno wrote: > > On Wed, 2 Sep 2009, DEEPAK BHATIA wrote: > >> Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't >> work. > > To run without SSL, you run the 'stopssl' command above but then use just > 'start' to start. > > > -- > > > > > > --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: Primary Key Forgery Attack?
Yeah - but it's better to have both kinds of security. The validation that the same ID is coming back in is simple and can be generically added to all Propel forms from a single place. That makes securing it with business logic easier, because you don't have to worry about invalid IDs. I implemented the ID forge protection in my BasePropelForm last night and it works great, so now I have both that and the security of verifying that the record being edited is allowed to be edited by the authenticated user. It just seems like this is something that would be built in - just like CSRF protection. It's a basic web attack strategy that could (and I think should) easily be defended against by the framework - making it that much better for the user. And it's not difficult - it only took me a couple hours to create it. Jeremy Thomerson On Wed, Sep 2, 2009 at 3:10 AM, Sid Bachtiar wrote: > > Hi Jeremy, > > Those Symfony / Propel generated forms are basic with no security. You > will need to secure them based on the requirements of your project. > > You don't secure a record from unauthorized access by obscuring the > ID, you actually have to check to make sure that a user is allowed to > access particular record when they try to. > > Sid > > On Wed, Sep 2, 2009 at 5:55 PM, Jeremy > Thomerson wrote: > > > > I have a question. In Symfony / Propel forms, when I am editing an > > object, the primary key is a hidden field. I have verified that by > > using Tamper Data (or anything of the nature), I can modify a > > different row in the database (iow, someone else's information) by > > simply changing the ID value in the HTTP submission. > > > > This is very bad default behavior. Is there a way to turn this off? > > > > I have come up with a way to overcome it - similar to the CSRF > > protection. But I've hit one snag. Here's the thought: > > > > 1 - In BasePropelForm __construct, I add a field to the form that has > > a hash of the form class, the primary key value, and some secret > > internal salt (other things could be added). > > > > 2 - I add a validator to the primary key field of the form that > > verifies that the value that comes in on submission also hashes out to > > the hash that was in the form. > > > > This works in my tests. The only snag is that I can't find an > > automated way of getting the primary key field name. Is there a way? > > > > Thanks, > > Jeremy Thomerson > > > > > > > > > > > --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: creating drop down in index template
Is this a question? Am 02.09.2009 um 08:26 schrieb sunny: > > Creating a Drop-Down List Based on a Foreign Key Column in index > template . > > > --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: Xampp related issue
Hi Eno, Please help me in resolve this issue. The symfony web site we have developed in based on Linux hence we are using https to access the same. Why does http://10.0.1.66 doesn't work ? Thanks Deepak On Wed, Sep 2, 2009 at 9:36 PM, DEEPAK BHATIA wrote: > Thanks > > Actually I am accessing the linux machine through telnet and doing > stopssl and then start. > > Now when I run http://10.0.1.66, I get the error that 425 HTTP Error, > Unable to connect with remote host. > > Thanks > > On Wed, Sep 2, 2009 at 7:23 PM, Eno wrote: >> >> On Wed, 2 Sep 2009, DEEPAK BHATIA wrote: >> >>> Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't >>> work. >> >> To run without SSL, you run the 'stopssl' command above but then use just >> 'start' to start. >> >> >> -- >> >> >> >> >> >> > --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: Xampp related issue
On Wed, 2 Sep 2009, DEEPAK BHATIA wrote: > Actually I am accessing the linux machine through telnet and doing > stopssl and then start. stopssl switches off SSL in the config permanently, so maybe you have to issue a "stop" after that then a "start" to restart without SSL. > Now when I run http://10.0.1.66, I get the error that 425 HTTP Error, > Unable to connect with remote host. Means nothing is listening on port 80 at the other end - maybe Apache isn't running or it failed to startup (in whic case the error log will tell you why). -- --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: sfDoctrineActAsTaggablePlugin question
Hi.
Have you tried to pass to getPopulars() a query similar to this one?
> $q = Doctrine_Query::create()->from('Article a')->where('a.active = ?',
> true);
>
2009/9/1 Kevin Bond
> Hi Guys,
>
> I have a question about this plugin for anyone who knows about it.
>
> I have an Article model that I have set as Taggable. The article model has
> an 'active?' column. When selecting tags (ie using TagTable::getPopulars) I
> only want tags that are attached to active Articles to be returned.
>
> I see the getPopulars method has the option to add a doctrine query but I
> can't seem to figure out how to get it to work. The documentation shows
> that it can be done (I think) but it hasn't been translated from propel to
> doctrine yet.
>
> Anyone know how to do this?
>
> --
> Kevin
>
>
> >
>
--
With the best regards, Andy.
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"symfony users" group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---
[symfony-users] dissapearing DB menu in debug toolbar - no listener for creole events.
My symptom is that the DB menu in the debug toolbar has dissapeared (only on certain machines). After searching in the code, I've discovered that there are no listeners for application.log events for sfDebugConnection objects, so the dispatcher isnt sending creole log messages to function sfLogger::listenToLogEvent(). This is only happening on certain machines for identical code. Does anyone have any idea where I should be looking next ? thks Gareth --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: User group and permission in sfGuardPlugin
Hello Veasna, to set the credentials allowed to an application or module go to /apps//config/security.yml (in the case of an app) or /apps//modules//config/security.yml (in the case of a module, you have to create this file as symfony doesn't generate it by deffault), then add a credentials line like this: ///apps//config/security.yml default: is_secure: on credentials: the permission-name is one of your permissions (by default there's only an "admin" permission if you use the fixture file given by the plugin) in the model, so try adding several permissions and then when you try to access the app (or the module) with a user with a different permission the message "You don't have the required permission to access this page." will show up, this only works if the users you create are not super-admins, this attribute make that an user can bypass all credentials. I've never worked with groups, permissions for me are just enough. However, try setting the line in the security.yml file like this: credentials: and see if works. Good Luck! 2009/9/2 veasna.phal > > Dear all, > > I am currently a new symfony starter. Now I am in day 13 "The User", > and I have a problem with user group and permission. > > The question is How can I give the credential to the group and how to > enable it. Because when I try to create a different user in different > group that have different permission. It always redirect to backend as > a super administrator for normal user that i didn't tick as a super > administrator it show me the message "You don't have the required > permission to access this page.". > > Please kindly help me I really want your answers. > > Thanks in advance, > > Best regards, > > Veasna > > > > -- Have a nice day. Abraham Montilla. --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Set required fileds by language (i18n)
Hi everybody, Does anybody knows how to set a field required for a given language, and not for all languages, in a form ? In the ObjectFormTranslation.class.php ? e.g. : A news object which have a title for 3 differents languages and one of these is three language is required in the form (and not the 2 others). Regards, Pierre --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: help with customizing sfguard
doh! thank you! :D On Sep 2, 9:16 pm, pcummins wrote: > You have a typo in your template. > > $applicatonName is missing an i. > > On Sep 2, 12:42 am, jarthel wrote: > > > also, there's a topic about "Customize the sfGuardUser model". It > > seems I can make changes to the schema.yml for "user profiles". Does > > that mean I need to also make appropriate changes to my DB? > > > thanks again --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] Re: help with customizing sfguard
more questions please :) 1. how do I display validation errors in custom template? I was able to find the source of the default signinSuccess.php but it's unclear on what to include in my template. I believe the default form uses this class => sfGuardFormSignin.class.php. 2. How do I tell sfGuard to redirect to a particular page once login is successful? 3. Do I need to have records in sf_user if I'm authenticating via LDAP? Thanks again :) --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] where do most Symfony developers resize images, in the Form class, or in a validator?
I've a form that allows users to upload images that can represent them on the site. I need to crop and resize the images to be sure they are all the same size. I am curious where do most Symfony developers put their code for resizing images? In the form class? I assume it is bad practice to do this in the action? --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
[symfony-users] difficulty with running native SQL command
Hi there,
I'm developing in Symfony 1.2.4, using Propel and MySQL as my
database.
I've written a task that:
1. grabs a set of CSV files from a reporting source
2. uploads the CSV files using MySQL's 'load data infile ... ' syntax
It's step 2 above that is proving to be problematic.
The problem is that I keep getting an error saying, "SQLSTATE[42000]:
Syntax error or access violation: 1148 The used command is not allowed
with this MySQL version"
I write the query string to my debug log, cut n paste it into the CLI
of MySQL and it executes perfectly.
The code:
$connection = Propel::getConnection();
$taskLoad = "load data local infile '%s' into table task FIELDS
terminated by ',' optionally enclosed by '\"' lines terminated by '\
\n' IGNORE 1 LINES (task_id, ord_type_code, actn_type_code, order_no,
customer_name, product_desc, status, task_name, @rfs_rev_date,
@ms_rev_date, @ms_signoff_date, signoff_person, ack_by,
jeop_type_code, product_group, priority, actn_opt, sales_manager,
work_group, @crd, crd_days, access, monitor, serv_comp_ind, designer,
deps_signed_off, sales_reference, site_code, street, suburb,
post_code, state, @last_dep_signoff, cnd_project) SET rfs_rev_date =
str_to_date(@rfs_rev_date, '%%Y-%%m-%%d'), ms_rev_date = str_to_date
(@ms_rev_date, '%%Y-%%m-%%d'), ms_signoff_date = str_to_date
(@ms_signoff_date, '%%Y-%%m-%%d'), crd = str_to_date(@crd, '%%Y-%%m-%
%d'), last_dep_signoff = str_to_date(@last_dep_signoff, '%%Y-%%m-%
%d')";
//note the dates have %% (to escape the %) when we do a
sprintf()
$taskLoad = sprintf($taskLoad,$file);
sfContext::getInstance()->getLogger()->debug("{importCSVfiles}
running this: ".$taskLoad);
try {
$statement = $connection->prepare($taskLoad);
$result = $statement->execute();
}catch (Exception $e){
sfContext::getInstance()->getLogger()->debug("{importCSVfiles}
error ".$e->getMessage());
}
I've ensured that the user in question has been granted the global
FILE permission in order to allow them to run 'load data infile ... '.
As mentioned above, the query I write to the debug log works just fine
when executed via the CLI.
Any ideas where I could be going wrong?
Thanks for your help...
@wasabhi
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups
"symfony users" group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---
[symfony-users] Re: where do most Symfony developers resize images, in the Form class, or in a validator?
I will create a class that handle that, and passing some parameters I will do the resize/crop there. In this way you can reuse the code say from a batch script or the backend, etc. On Sep 3, 2009, at 1:35 PM, Jake Barnes wrote: > > > I've a form that allows users to upload images that can represent them > on the site. I need to crop and resize the images to be sure they are > all the same size. I am curious where do most Symfony developers put > their code for resizing images? In the form class? I assume it is bad > practice to do this in the action? > > > > > > --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to symfony-users@googlegroups.com To unsubscribe from this group, send email to symfony-users+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en -~--~~~~--~~--~--~---
