Re: How safe is CakePhps auth component and other ..

2011-09-11 Thread Simon Males
Olaf, I had the same problem, though I put the disableCache method in the beforeRender() action in app_crontroller.php http://book.cakephp.org/view/988/disableCache Never fully confirmed it was Microsoft Proxy though all the problem cases had an IE7 user agent. On Sun, Sep 11, 2011 at 11:57

Re: How safe is CakePhps auth component and other ..

2011-09-10 Thread Miloš Vučinić
Thank you very much, you are most kind ! All the best, Milos On Sep 9, 4:54 pm, Thomas Ploch profipl...@googlemail.com wrote: 1.) The Auth component is safe. It uses a salted SHA1 encrypted pw by default. It auto-escapes the fields already, so you don't have to bother with it. Just use SSL to

Re: How safe is CakePhps auth component and other ..

2011-09-10 Thread Olaf Reitmaier Veracierta
Hi Milos, SSL is a must... take care of what happen recently to me: http://cakephp.19694.n2.nabble.com/Auth-ACL-proxy-server-mixed-up-sessions-td6535034.html Regards, Olaf. On 09/10/2011 02:36 PM, Miloš Vučinić wrote: Thank you very much, you are most kind ! All the best, Milos On Sep 9,

How safe is CakePhps auth component and other ..

2011-09-09 Thread Miloš Vučinić
Hi, I have two questions and I hope someone can help me.. I am making application which needs to be relatively safe. So here are questions I have for you: 1. I am using auth component from cakephp , but I cannot escape the login fields because login component works for itself and I cannot edit

Re: How safe is CakePhps auth component and other ..

2011-09-09 Thread Thomas Ploch
1.) The Auth component is safe. It uses a salted SHA1 encrypted pw by default. It auto-escapes the fields already, so you don't have to bother with it. Just use SSL to encrypt the connection to sensitive parts of the application to be on the (very) safe side. 2.) Well, if you use the Apache