[symfony-users] Primary Key Forgery Attack?

2009-09-02 Thread Jeremy Thomerson

I have a question.  In Symfony / Propel forms, when I am editing an
object, the primary key is a hidden field.  I have verified that by
using Tamper Data (or anything of the nature), I can modify a
different row in the database (iow, someone else's information) by
simply changing the ID value in the HTTP submission.

This is very bad default behavior.  Is there a way to turn this off?

I have come up with a way to overcome it - similar to the CSRF
protection.  But I've hit one snag.  Here's the thought:

1 - In BasePropelForm __construct, I add a field to the form that has
a hash of the form class, the primary key value, and some secret
internal salt (other things could be added).

2 - I add a validator to the primary key field of the form that
verifies that the value that comes in on submission also hashes out to
the hash that was in the form.

This works in my tests.  The only snag is that I can't find an
automated way of getting the primary key field name.  Is there a way?

Thanks,
Jeremy Thomerson

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] creating drop down in index template

2009-09-02 Thread sunny

Creating a Drop-Down List Based on a Foreign Key Column in index
template .

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: Primary Key Forgery Attack?

2009-09-02 Thread Sid Bachtiar

Hi Jeremy,

Those Symfony / Propel generated forms are basic with no security. You
will need to secure them based on the requirements of your project.

You don't secure a record from unauthorized access by obscuring the
ID, you actually have to check to make sure that a user is allowed to
access particular record when they try to.

Sid

On Wed, Sep 2, 2009 at 5:55 PM, Jeremy
Thomersonjeremythomer...@gmail.com wrote:

 I have a question.  In Symfony / Propel forms, when I am editing an
 object, the primary key is a hidden field.  I have verified that by
 using Tamper Data (or anything of the nature), I can modify a
 different row in the database (iow, someone else's information) by
 simply changing the ID value in the HTTP submission.

 This is very bad default behavior.  Is there a way to turn this off?

 I have come up with a way to overcome it - similar to the CSRF
 protection.  But I've hit one snag.  Here's the thought:

 1 - In BasePropelForm __construct, I add a field to the form that has
 a hash of the form class, the primary key value, and some secret
 internal salt (other things could be added).

 2 - I add a validator to the primary key field of the form that
 verifies that the value that comes in on submission also hashes out to
 the hash that was in the form.

 This works in my tests.  The only snag is that I can't find an
 automated way of getting the primary key field name.  Is there a way?

 Thanks,
 Jeremy Thomerson

 


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] User group and permission in sfGuardPlugin

2009-09-02 Thread veasna.phal

Dear all,

I am currently a new symfony starter. Now I am in day 13 The User,
and I have a problem with user group and permission.

The question is How can I give the credential to the group and how to
enable it. Because when I try to create a different user in different
group that have different permission. It always redirect to backend as
a super administrator for normal user that i didn't tick as a super
administrator it show me the message You don't have the required
permission to access this page..

Please kindly help me I really want your answers.

Thanks in advance,

Best regards,

Veasna

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Plugin for Multiple Upload

2009-09-02 Thread Avani

Hi all,

Anyone know any plugin available in symfony for multiple upload?  I
want to do that for multiple upload of pics for creating photo album
like orkut and facebook..

Any Idea?  Pls help me.

Thanks in advance.

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: Plugin for Multiple Upload

2009-09-02 Thread Johannes Heinen

Wrote this a few weeks ago:
http://www.symfony-project.org/plugins/sfWidgetFormInputSWFUploadPlugin

I'd be kind and helpful if you'd give it a try and help improve the
javascripts/stylesheets for cross browser compatibility (think it
works in major browsers = IE6.

If you browse the plugin page you'll find many more widgets and/or
media related plugins, many of them provide multiple file upload
capabilities in various ways.

Have fun :)

On 2 Sep., 10:25, Avani avani.v.puj...@gmail.com wrote:
 Hi all,

 Anyone know any plugin available in symfony for multiple upload?  I
 want to do that for multiple upload of pics for creating photo album
 like orkut and facebook..

 Any Idea?  Pls help me.

 Thanks in advance.
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: help on Virtual columns display in List view of symfony demo setup tutorial day 12

2009-09-02 Thread yyyyxxxx42

Hi I got to fix it as i was missing something: 'layout:  stacked'

On Sep 1, 6:12 pm, Eno symb...@gmail.com wrote:
 On Tue, 1 Sep 2009, 42 wrote:
  jobeet/1_2/Doctrine/en/12#chapter_12_sub_virtual_columns). I think I
  followed the guide as per described and changing in file 'apps\backend
  \modules\job\config\generator.yml'. But still job list in admin
  section appears tabular.

 Did you regenerate and clear cache?

 --
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Xampp related issue

2009-09-02 Thread DEEPAK BHATIA

Hi,

I know that Symfony Group is not a forum to ask this question but I am
not getting help on this.

I have installed XAMPP on linux. By default ssl is working so when run
https://localhost it shows xampp screen.

Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't work.

Please help me in this regard.

Thanks

Deepak Bhatia

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: Xampp related issue

2009-09-02 Thread Sid Bachtiar

How do you know http://localhost stops working? Did you check
apache/httpd error log?

On Wed, Sep 2, 2009 at 10:54 PM, DEEPAK BHATIAtoreachdee...@gmail.com wrote:

 Hi,

 I know that Symfony Group is not a forum to ask this question but I am
 not getting help on this.

 I have installed XAMPP on linux. By default ssl is working so when run
 https://localhost it shows xampp screen.

 Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't work.

 Please help me in this regard.

 Thanks

 Deepak Bhatia

 




-- 
Blue Horn Ltd - System Development
http://bluehorn.co.nz

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Newsletter plugin?

2009-09-02 Thread Lambert

Hello,
Is there a symfony newsletter plugin (no, I cannot find it...), has
someone developed it or is someone interested in co-developing one for
publication?

Lambert
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: help with customizing sfguard

2009-09-02 Thread pcummins

You have a typo in your template.

$applicatonName is missing an i.

On Sep 2, 12:42 am, jarthel jart...@gmail.com wrote:
 also, there's a topic about Customize the sfGuardUser model. It
 seems I can make changes to the schema.yml for user profiles. Does
 that mean I need to also make appropriate changes to my DB?

 thanks again
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: Xampp related issue

2009-09-02 Thread DEEPAK BHATIA

Hi,

I get the error

425 HTTP Error :Unable to connect with remote host.

But error_log in logs directory gives this below

[Wed Sep 02 17:13:57 2009] [notice] Apache/2.2.11 (Unix) DAV/2
mod_ssl/2.2.11 OpenSSL/0.9.8i PHP/5.2.8 mod_apreq2-20051231/2.6.0
mod_perl/2.0.4 Perl/v5.10.0 configured -- resuming normal operations

On Wed, Sep 2, 2009 at 4:30 PM, Sid Bachtiarsid.bacht...@gmail.com wrote:

 How do you know http://localhost stops working? Did you check
 apache/httpd error log?

 On Wed, Sep 2, 2009 at 10:54 PM, DEEPAK BHATIAtoreachdee...@gmail.com wrote:

 Hi,

 I know that Symfony Group is not a forum to ask this question but I am
 not getting help on this.

 I have installed XAMPP on linux. By default ssl is working so when run
 https://localhost it shows xampp screen.

 Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't 
 work.

 Please help me in this regard.

 Thanks

 Deepak Bhatia

 




 --
 Blue Horn Ltd - System Development
 http://bluehorn.co.nz

 


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Help Please! - Error with Jobeet

2009-09-02 Thread Martin - Digital Express

I´m new with symfony, and I´m trying to start with Jobeet but I have
an error when trying to insert-sql with doctrine.

I run the command  below with this error:

D:\AppServ\www\symfony\sfprojectsymfony doctrine:build-sql
 doctrine  generating sql for models

  While exporting model class 'JobeetAffiliate' to SQL: Couldn't
locate driver n
amed mysql

D:\AppServ\www\symfony\sfproject

I´m stopped here. Please help me!

Thanks!

martin

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: Help Please! - Error with Jobeet

2009-09-02 Thread Gábor Fási

Are you sure you have pdo_mysql enabled in the php.ini your command
line interface uses?

On Wed, Sep 2, 2009 at 13:55, Martin - Digital
Expressmartin.va...@gmail.com wrote:

 I´m new with symfony, and I´m trying to start with Jobeet but I have
 an error when trying to insert-sql with doctrine.

 I run the command  below with this error:

 D:\AppServ\www\symfony\sfprojectsymfony doctrine:build-sql
 doctrine  generating sql for models

  While exporting model class 'JobeetAffiliate' to SQL: Couldn't
 locate driver n
 amed mysql

 D:\AppServ\www\symfony\sfproject

 I´m stopped here. Please help me!

 Thanks!

 martin

 


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: parameters in configure()

2009-09-02 Thread Germana Oliveira

Eno escribió:
 On Tue, 1 Sep 2009, Germana Oliveira wrote:

   
 BUT I HAVE TWO PROBLEMS:

 1. with a new form (isNew):
 Notice: Undefined offset: 0 in
 /home/germana/www/indepabis/lib/form/PersonaForm.class.php on line 53
 

 Were these form classes generated from models?
   
Yes, these clases are generated from models
 Also what does the code of PersonaForm.class.php look like? What is around 
 line 53?

   
PersonaForm:

class PersonaForm extends BasePersonaForm
{

  public function configure($object = null, $options = array())
  {
parent::configure();
unset($this['id']);

$this-widgetSchema['direccion'] = new sfWidgetFormTextArea(array(), 
array('cols' = '50', 'rows' = '2'));
$this-widgetSchema['estado_id'] = new sfWidgetFormPropelChoice(
  array(
'model'  = 'Estado',
'add_empty'  = false,
'order_by'   = array('Nombre', 'asc'),
  )
);
$this-widgetSchema['municipio_id'] = new sfWidgetFormPropelChoice(
  array(
'model'   = 'Municipio',
'add_empty'   = false,
'order_by'= array('Nombre', 'asc'),
'criteria'= 
MunicipioPeer::criteriaMunicipio(EstadoPeer::obtenerPorNombre('Carabobo')-getId()),
  )
);
$this-widgetSchema['parroquia_id'] = new 
sfWidgetFormPropelChoice(array(
   'model'   = 'Parroquia',
   'add_empty'   = false,
   'order_by'= array('Nombre', 'asc'),
   'criteria'= 
ParroquiaPeer::criteriaParroquia(EstadoPeer::obtenerPorNombre('Carabobo')-getId(),
 
MunicipioPeer::obtenerPorNombre('Valencia')-getId()),
));

$this-setDefault('estado_id', 
EstadoPeer::obtenerPorNombre('Carabobo')-getId());
$this-setDefault('municipio_id', 
MunicipioPeer::obtenerPorNombre('Valencia')-getId());

$tipo_persona = strtolower($options[0]);   LINE 52
$tipo_persona_id = 
TipoPersonaPeer::obtenerPorNombre($tipo_persona)-getId();
$this-setDefault('tipo_persona_id', $tipo_persona_id);

$this-setValidators(array(
  'nombre'= new sfValidatorString(
  array('required' = true, 'min_length'= 3),
  array('required' = 'Campo Requerido', 
'min_length' = 'El nombre es muy corto')
  ),
  'identificacion'= new sfValidatorNumber(
  array('required' = true),
  array('required' = 'Campo Requerido', 
'invalid' = 'Introduzca solo numeros')
  ),
 'tipo_persona_id' = new sfValidatorPropelChoice(array('model' 
= 'TipoPersona', 'column' = 'id')),
 'estado_id'   = new sfValidatorPropelChoice(array('model' 
= 'Estado', 'column' = 'id')),
 'municipio_id'= new sfValidatorPropelChoice(array('model' 
= 'Municipio', 'column' = 'id')),
 'parroquia_id'= new sfValidatorPropelChoice(array('model' 
= 'Parroquia', 'column' = 'id')),
 'tipo_identificacion' = new sfValidatorChoice(array('choices' = 
array('V-' = 'V', 'E-' = 'E', 'J-' = 'J'))),
  'telefono'   = new sfValidatorNumber(
  array('required' = false),
  array('invalid' = 'Introduzca solo numeros')
  ),
  'direccion'  = new sfValidatorString(
  array('required' = true, 'min_length'= 4),
  array('required' = 'Campo Requerido', 
'min_length' = 'La direccion es muy corta')
  )
));

$this-widgetSchema-setLabels(array(
  'tipo_persona_id'  = 'Tipo de Persona',
));
  }

}


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: Newsletter plugin?

2009-09-02 Thread Reynier Pérez Mira

Lambert wrote:
 Hello,
 Is there a symfony newsletter plugin (no, I cannot find it...), has
 someone developed it or is someone interested in co-developing one for
 publication?
 

I could help you, just let me know what you need and what is my part here
Cheers
-- 
Ing. Reynier Pérez Mira

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] sfValidatorDate with min/max and date_format

2009-09-02 Thread CA

I am using sfValidatorDate to check that a date is in the 'mm/dd/yy'
format. 'date_format' is causing Min and Max to fail. I believe the
failure is caused by the shortened year format.

How can I get the validator to enforce both the date format and the
min/max. I tried using the 'date_format' option.

$this-setValidator('start_date', new sfValidatorDate(
  array(
'min' = mktime(0,0,0,1,1,date('y',time())),
'max' = mktime(0,0,0,12,31,date('y',time())+1),
'required' = true,
'date_format' = '/^[0-9]{2}\/[0-9]{2}\/[0-9]{2}$/',
'date_output'='m/d/y'
  ),array(
'min'='Must start this year',
'max'='Cannot span two years',
'bad_format'='Must be MM/DD/YY',
'required'='Start Date required')
  ));

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: Help Please! - Error with Jobeet

2009-09-02 Thread Eno

On Wed, 2 Sep 2009, Martin - Digital Express wrote:

 D:\AppServ\www\symfony\sfprojectsymfony doctrine:build-sql
  doctrine  generating sql for models
 
   While exporting model class 'JobeetAffiliate' to SQL: Couldn't
 locate driver n
 amed mysql

Looks like you dont have pdo_mysql in your PHP.

On Mac/Linux, run this from a terminal window:

php -m | egrep [Pp][Dd][Oo]

to see if PDO is present/enabled.



-- 



--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: Xampp related issue

2009-09-02 Thread Eno

On Wed, 2 Sep 2009, DEEPAK BHATIA wrote:

 Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't work.

To run without SSL, you run the 'stopssl' command above but then use just 
'start' to start.


-- 



--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: Xampp related issue

2009-09-02 Thread DEEPAK BHATIA

Thanks

Actually I am accessing the linux machine through telnet and doing
stopssl and then start.

Now when I run http://10.0.1.66, I get the error that 425 HTTP Error,
Unable to connect with remote host.

Thanks

On Wed, Sep 2, 2009 at 7:23 PM, Enosymb...@gmail.com wrote:

 On Wed, 2 Sep 2009, DEEPAK BHATIA wrote:

 Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't 
 work.

 To run without SSL, you run the 'stopssl' command above but then use just
 'start' to start.


 --



 


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: Primary Key Forgery Attack?

2009-09-02 Thread Jeremy Thomerson
Yeah - but it's better to have both kinds of security.  The validation that
the same ID is coming back in is simple and can be generically added to all
Propel forms from a single place.  That makes securing it with business
logic easier, because you don't have to worry about invalid IDs.  I
implemented the ID forge protection in my BasePropelForm last night and it
works great, so now I have both that and the security of verifying that the
record being edited is allowed to be edited by the authenticated user.

It just seems like this is something that would be built in - just like CSRF
protection.  It's a basic web attack strategy that could (and I think
should) easily be defended against by the framework - making it that much
better for the user.  And it's not difficult - it only took me a couple
hours to create it.

Jeremy Thomerson

On Wed, Sep 2, 2009 at 3:10 AM, Sid Bachtiar sid.bacht...@gmail.com wrote:


 Hi Jeremy,

 Those Symfony / Propel generated forms are basic with no security. You
 will need to secure them based on the requirements of your project.

 You don't secure a record from unauthorized access by obscuring the
 ID, you actually have to check to make sure that a user is allowed to
 access particular record when they try to.

 Sid

 On Wed, Sep 2, 2009 at 5:55 PM, Jeremy
 Thomersonjeremythomer...@gmail.com wrote:
 
  I have a question.  In Symfony / Propel forms, when I am editing an
  object, the primary key is a hidden field.  I have verified that by
  using Tamper Data (or anything of the nature), I can modify a
  different row in the database (iow, someone else's information) by
  simply changing the ID value in the HTTP submission.
 
  This is very bad default behavior.  Is there a way to turn this off?
 
  I have come up with a way to overcome it - similar to the CSRF
  protection.  But I've hit one snag.  Here's the thought:
 
  1 - In BasePropelForm __construct, I add a field to the form that has
  a hash of the form class, the primary key value, and some secret
  internal salt (other things could be added).
 
  2 - I add a validator to the primary key field of the form that
  verifies that the value that comes in on submission also hashes out to
  the hash that was in the form.
 
  This works in my tests.  The only snag is that I can't find an
  automated way of getting the primary key field name.  Is there a way?
 
  Thanks,
  Jeremy Thomerson
 
  
 

 


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: creating drop down in index template

2009-09-02 Thread Hellmich Dennis

Is this a question?


Am 02.09.2009 um 08:26 schrieb sunny:


 Creating a Drop-Down List Based on a Foreign Key Column in index
 template .

 


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: Xampp related issue

2009-09-02 Thread DEEPAK BHATIA

Hi Eno,

Please help me in resolve this issue.

The symfony web site we have developed in based on Linux hence we are
using https to access the same.

Why does http://10.0.1.66 doesn't work ?

Thanks

Deepak

On Wed, Sep 2, 2009 at 9:36 PM, DEEPAK BHATIAtoreachdee...@gmail.com wrote:
 Thanks

 Actually I am accessing the linux machine through telnet and doing
 stopssl and then start.

 Now when I run http://10.0.1.66, I get the error that 425 HTTP Error,
 Unable to connect with remote host.

 Thanks

 On Wed, Sep 2, 2009 at 7:23 PM, Enosymb...@gmail.com wrote:

 On Wed, 2 Sep 2009, DEEPAK BHATIA wrote:

 Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't 
 work.

 To run without SSL, you run the 'stopssl' command above but then use just
 'start' to start.


 --



 



--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: Xampp related issue

2009-09-02 Thread Eno

On Wed, 2 Sep 2009, DEEPAK BHATIA wrote:

 Actually I am accessing the linux machine through telnet and doing
 stopssl and then start.

stopssl switches off SSL in the config permanently, so maybe you have to 
issue a stop after that then a start to restart without SSL.

 Now when I run http://10.0.1.66, I get the error that 425 HTTP Error,
 Unable to connect with remote host.

Means nothing is listening on port 80 at the other end - maybe Apache 
isn't running or it failed to startup (in whic case the error log will 
tell you why).



-- 



--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: sfDoctrineActAsTaggablePlugin question

2009-09-02 Thread Andrei Dziahel
Hi.

Have you tried to pass to getPopulars() a query similar to this one?

 $q = Doctrine_Query::create()-from('Article a')-where('a.active = ?',
 true);


2009/9/1 Kevin Bond kevinb...@gmail.com

 Hi Guys,

 I have a question about this plugin for anyone who knows about it.

 I have an Article model that I have set as Taggable.  The article model has
 an 'active?' column.  When selecting tags (ie using TagTable::getPopulars) I
 only want tags that are attached to active Articles to be returned.

 I see the getPopulars method has the option to add a doctrine query but I
 can't seem to figure out how to get it to work.  The documentation shows
 that it can be done (I think) but it hasn't been translated from propel to
 doctrine yet.

 Anyone know how to do this?

 --
 Kevin


 



-- 
With the best regards, Andy.

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] dissapearing DB menu in debug toolbar - no listener for creole events.

2009-09-02 Thread rosbif

My symptom is that the DB menu in the debug toolbar has dissapeared
(only on certain machines).

After searching in the code, I've discovered that there are no
listeners for application.log events for sfDebugConnection objects, so
the dispatcher isnt sending creole log messages to function
sfLogger::listenToLogEvent().

This is only happening on certain machines for identical code.  Does
anyone have any idea where I should be looking next ?

thks
Gareth
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: User group and permission in sfGuardPlugin

2009-09-02 Thread Abraham Montilla
Hello Veasna, to set the credentials allowed to an application or module go
to project-name/apps/app-name/config/security.yml (in the case of an
app) or
project-name/apps/app-name/modules/module-name/config/security.yml (in
the case of a module, you have to create this file as symfony doesn't
generate it by deffault), then add a credentials line like this:

//project-name/apps/app-name/config/security.yml
default:
  is_secure: on
  credentials: permission-name

the permission-name is one of your permissions (by default there's only an
admin permission if you use the fixture file given by the plugin) in the
model, so try adding several permissions and then when you try to access the
app (or the module) with a user with a different permission the message You
don't have the required permission to access this page. will show up, this
only works if the users you create are not super-admins, this attribute make
that an user can bypass all credentials.

I've never worked with groups, permissions for me are just enough. However,
try setting the line in the security.yml file like this:

  credentials: group-name

and see if works.


Good Luck!

2009/9/2 veasna.phal veasna.p...@gmail.com


 Dear all,

 I am currently a new symfony starter. Now I am in day 13 The User,
 and I have a problem with user group and permission.

 The question is How can I give the credential to the group and how to
 enable it. Because when I try to create a different user in different
 group that have different permission. It always redirect to backend as
 a super administrator for normal user that i didn't tick as a super
 administrator it show me the message You don't have the required
 permission to access this page..

 Please kindly help me I really want your answers.

 Thanks in advance,

 Best regards,

 Veasna

 



-- 
Have a nice day.
Abraham Montilla.

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Set required fileds by language (i18n)

2009-09-02 Thread Chtipepere

Hi everybody,

Does anybody knows how to set a field required for a given language,
and not for all languages, in a form ?
In the ObjectFormTranslation.class.php ?
e.g. :
A news object which have a title for 3 differents languages and one of
these is three language is required in the form (and not the 2
others).

Regards,
Pierre
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: help with customizing sfguard

2009-09-02 Thread jarthel

doh!

thank you! :D

On Sep 2, 9:16 pm, pcummins patwcumm...@gmail.com wrote:
 You have a typo in your template.

 $applicatonName is missing an i.

 On Sep 2, 12:42 am, jarthel jart...@gmail.com wrote:

  also, there's a topic about Customize the sfGuardUser model. It
  seems I can make changes to the schema.yml for user profiles. Does
  that mean I need to also make appropriate changes to my DB?

  thanks again
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] Re: help with customizing sfguard

2009-09-02 Thread jarthel

more questions please :)

1. how do I display validation errors in custom template? I was able
to find the source of the default signinSuccess.php but it's unclear
on what to include in my template. I believe the default form uses
this class = sfGuardFormSignin.class.php.

2. How do I tell sfGuard to redirect to a particular page once login
is successful?

3. Do I need to have records in sf_user if I'm authenticating via
LDAP?

Thanks again :)
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---



[symfony-users] difficulty with running native SQL command

2009-09-02 Thread wasabhi

Hi there,

I'm developing in Symfony 1.2.4, using Propel and MySQL as my
database.

I've written a task that:

1. grabs a set of CSV files from a reporting source
2. uploads the CSV files using MySQL's 'load data infile ... ' syntax

It's step 2 above that is proving to be problematic.

The problem is that I keep getting an error saying, SQLSTATE[42000]:
Syntax error or access violation: 1148 The used command is not allowed
with this MySQL version

I write the query string to my debug log, cut n paste it into the CLI
of MySQL and it executes perfectly.

The code:

$connection = Propel::getConnection();

$taskLoad = load data local infile '%s' into table task FIELDS
terminated by ',' optionally enclosed by '\' lines terminated by '\
\n' IGNORE 1 LINES (task_id, ord_type_code, actn_type_code, order_no,
customer_name, product_desc, status, task_name, @rfs_rev_date,
@ms_rev_date, @ms_signoff_date, signoff_person, ack_by,
jeop_type_code, product_group, priority, actn_opt, sales_manager,
work_group, @crd, crd_days, access, monitor, serv_comp_ind, designer,
deps_signed_off, sales_reference, site_code, street, suburb,
post_code, state, @last_dep_signoff, cnd_project) SET rfs_rev_date =
str_to_date(@rfs_rev_date, '%%Y-%%m-%%d'), ms_rev_date = str_to_date
(@ms_rev_date, '%%Y-%%m-%%d'), ms_signoff_date = str_to_date
(@ms_signoff_date, '%%Y-%%m-%%d'), crd = str_to_date(@crd, '%%Y-%%m-%
%d'), last_dep_signoff = str_to_date(@last_dep_signoff, '%%Y-%%m-%
%d');

//note the dates have %% (to escape the %) when we do a 
sprintf()

$taskLoad = sprintf($taskLoad,$file);

sfContext::getInstance()-getLogger()-debug({importCSVfiles}
running this: .$taskLoad);

try {
$statement = $connection-prepare($taskLoad);
$result = $statement-execute();
}catch (Exception $e){

sfContext::getInstance()-getLogger()-debug({importCSVfiles}
error .$e-getMessage());
}


I've ensured that the user in question has been granted the global
FILE permission in order to allow them to run 'load data infile ... '.

As mentioned above, the query I write to the debug log works just fine
when executed via the CLI.

Any ideas where I could be going wrong?

Thanks for your help...
@wasabhi
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
symfony users group.
To post to this group, send email to symfony-users@googlegroups.com
To unsubscribe from this group, send email to 
symfony-users+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/symfony-users?hl=en
-~--~~~~--~~--~--~---