Re: Security Component: blackhole with no, erm, whitehole?

2012-01-05 Thread DragonFlyEye
Thanks, Jeremy. I think I'm going to opt for roughly the same thing. Use my pushSSL() function - analogous to your __unforceSSL() - on all controllers that don't require SSL, then use the switching style for those that do require SSL. It just seems weird to me that they have a function in Secur

Re: Security Component: blackhole with no, erm, whitehole?

2012-01-04 Thread Jeremy Burns | Class Outfit
Here's how I did this on an app (this is 1.3 but I'd guess it'd be fairly easy to transpose to 2.0 if needed). In app_controller create a function: function __requireSecure() { ... conditions to check ... return true if SSL is needed ... r

Re: Security Component: blackhole with no, erm, whitehole?

2012-01-04 Thread DragonFlyEye
Can anyone help me out, here? -- Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions. To unsubscribe from this group, send email to cake-php+unsub

Security Component: blackhole with no, erm, whitehole?

2012-01-04 Thread DragonFlyEye
Here's what I don't get about the Security Component: if there's an option to use the blackholeCallback for requireSecure, why is there no option to provide a callback for anything else? I'm using this system as outlined in the book to force SSL on certain actions. But I'd like to force people