Re: Howto secure a form / posted data from tampering?

2008-04-09 Thread Marcelius
Hi Larry thank you very much for your help, but i'm afraid there's just a small problem left (or is this by design?): It doesn't work if you don't define $this-Security- blackHoleCallback. It only works (in my situation) when you define a callback and, if defined, that callback is allways invoked

Howto secure a form / posted data from tampering?

2008-04-08 Thread Marcel
Hello The problem is that a model has some fields that the user may never edit. I don't show them in the /edit view so they don't get posted (by default). But manualy adding some of those private fields will result in illegal save. I've noticed the secure method in the api of the FormHelper to

Re: Howto secure a form / posted data from tampering?

2008-04-08 Thread Bert Van den Brande
In your call to $model-save() you can set the fields that can be updated. All other fields will be ignored ... On Tue, Apr 8, 2008 at 3:37 PM, Marcel [EMAIL PROTECTED] wrote: Hello The problem is that a model has some fields that the user may never edit. I don't show them in the /edit

Re: Howto secure a form / posted data from tampering?

2008-04-08 Thread grigri
To use the FormHelper's secure method, just include the Security component in your controller: it works automagically. On Apr 8, 2:40 pm, Bert Van den Brande [EMAIL PROTECTED] wrote: In your call to $model-save() you can set the fields that can be updated. All other fields will be ignored ...

Re: Howto secure a form / posted data from tampering?

2008-04-08 Thread Marcelius
Thanks for your anwsers! @Bert: Think that method is pretty straight forward, havn't checked it yet but I'm sure that will work without any problems @grigri: Seems like it doesn't do it's job like it should in my situation, do I need to configure something? I think it has something to do with

Re: Howto secure a form / posted data from tampering?

2008-04-08 Thread Larry E. Masters aka PhpNut
Marcelius, I have fixed the issues with multiple record forms in the latest svn branch version of 1.2.x.x You can grab the latest nightly release with the fixes: http://cakephp.org/downloads/index/nightly/1.2.x.x Everything should work properly if you are using the security component and the