Re: save and update

2011-08-19 Thread euromark
he probably means "injection" attacks the security component itself will NOT help here - as some might think. it only ensures that the inputs stay the same, they are not covering the content of them. @see http://www.dereuromark.de/2010/09/21/saving-model-data-and-security/ for solutions On 19 Aug

Re: save and update

2011-08-19 Thread Teddy Zeenny
Yep, the unset will do it. On Fri, Aug 19, 2011 at 11:47 AM, Prabha vathi wrote: > Hi, > > No edit! Once added that is it. So I don't want anyone to edit the post > added! Admin has edit section. > so the unset will do that trick? > > I have already added the unset. But I didn't check it so far.

Re: save and update

2011-08-19 Thread Prabha vathi
Hi, No edit! Once added that is it. So I don't want anyone to edit the post added! Admin has edit section. so the unset will do that trick? I have already added the unset. But I didn't check it so far. -- Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org Chec

Re: save and update

2011-08-19 Thread Teddy Zeenny
You can perform user authentication and make sure the user owns this particular article before updating it. Then if it is another user, the update will fail anyway so no danger there. You can also use unset($this->data['Post']['id']) in the "add" action to make sure the id is not set. (since the u

Re: save and update

2011-08-19 Thread Prabha vathi
Instead of one week, How to do it for one second? I think i need to move my site to another MVC :( -- Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related ques

Re: save and update

2011-08-19 Thread Zaky Katalan-Ezra
Try and see. On Fri, Aug 19, 2011 at 11:30 AM, Prabha vathi wrote: > It is auto increment. If you click view source, you will get the page html > coding. You can save that form in your local computer. Now if you edit the > form and add one hidden id field and if you submit. ? > > So

Re: save and update

2011-08-19 Thread Zaky Katalan-Ezra
You can't prevent editing the article and replacing the whole text. You can set the title to disable if a week passed since the article created. On Fri, Aug 19, 2011 at 10:42 AM, Teddy Zeenny wrote: > *Now instead of posting, If someone try to post a new story with old > post's id what will happe

Re: save and update

2011-08-19 Thread Prabha vathi
It is auto increment. If you click view source, you will get the page html coding. You can save that form in your local computer. Now if you edit the form and add one hidden id field and if you submit. ? So what will happen on that time? -- Our newest site for the community: CakeP

Re: save and update

2011-08-19 Thread Teddy Zeenny
*Now instead of posting, If someone try to post a new story with old post's id what will happen?* How could that happen ? Isn't your post id a database auto-increment ? On Fri, Aug 19, 2011 at 10:09 AM, Prabha vathi wrote: > Hi, > > I have created a site, where people can also post. If we pass i

save and update

2011-08-19 Thread Prabha vathi
Hi, I have created a site, where people can also post. If we pass id, cakephp will update. Now instead of posting, If someone try to post a new story with old post's id what will happen? How to avoid such a things happening? -- Our newest site for the community: CakePHP Video Tutorials http:

Re: Save and Update 2 or more Tables

2011-01-24 Thread chris...@yahoo.com
Thanks Amit, I manage to do that, but I have another problem,... Once user is a member now I need that "Join" button replaced with "Leave" and I can not make that php statement. e.g. ...? ? ? the table I have is id int(11) UNSIGNEDNo auto_increment

Re: Save and Update 2 or more Tables

2011-01-06 Thread Amit Badkas
Hi. I think the line if(!$this->GroupMember->save($this->$member)) should be if($this->GroupMember->save($member)) Hope this helps. Amit Badkas PHP Applications for E-Biz: http://www.sanisoft.com On Fri, Jan 7, 2011 at 10:22 AM, chris...@yahoo.com wrote: > if(!$this->GroupMember->save($t

Save and Update 2 or more Tables

2011-01-06 Thread chris...@yahoo.com
Hi guys, Trying to create members join function and need to save and update in 3 tables. Here is what I have, but its not working, it's not adding to GroupMember table... any clue...? function join($id) { if(!($user = $this->User->findById($this->user['id'])))