Re: where to start - basic security question?

2009-01-13 Thread SethA
I think I should clarify. I think Adam correctly understood what I was trying to get at. For further context, look at the blog example code and how they use the HTML helper to craft the links to actions like deleting posts, creating posts, etc. So you get a delete link that when you hover you see

Re: where to start - basic security question?

2009-01-13 Thread soosa
If you don't like the default {controller/action/params} shape then CakePHP accepts your own custome URLs by using URL Routes, check this out "Custom URLs from the Site Root ". Moreover, having controller name, action, and para

Re: where to start - basic security question?

2009-01-13 Thread Adam Royle
Yes, I would say most people use the controller/action/params type urls. Most people's thoughts about passing the action through a POST instead of a GET to make it more secure are moot. You can fake (and modify variables) in a POST request just as easy as you can with GET. Your post indicates th

Re: where to start - basic security question?

2009-01-12 Thread Miles J
You can simple allow/deny users from viewing certain actions depending on their user/login status. http://book.cakephp.org/view/172/Authentication http://book.cakephp.org/view/175/Security-Component --~--~-~--~~~---~--~~ You received this message because you are su

where to start - basic security question?

2009-01-12 Thread SethA
I'm new to all this. It all started with a desire on my part to start building some PHP based apps on my own time. I'm not a programmer by trade, so try to be understanding with me :). After months of [part time] googling, I've become familiar (somewhat) with MVC, why it is important, frameworks,