[symfony-users] Bug on sfCacheSessionStorage: feedback needed (#8535)

2010-04-13 Thread Paulo Magalhaes
Hi everyone, I bumped into an issue when using sfCacheSessionStorage. Because it doesn't set a Cache-Control header, a page generated for a user can be delivered to the wrong user from a web proxy allowing him to take over another user credentials, even if by accident. The complete details

Re: [symfony-users] Applying Filter to JS/CSS for CDN support

2010-01-21 Thread Paulo Magalhaes
Hi Dan, I do something similar but I didn't go through the filter route. By overwriting the _compute_public_path() in AssetHelper.php you can achieve the same: just declare the cdn hostname in your app.yml (leave blank for dev) and prepend that to the urls in that function. Cheers, PM

[symfony-users] Google bots and sessions

2008-09-29 Thread Paulo Magalhaes
Hi, I've a site which has over a million of individual pages (URLs), and whenever google bots scans the site, each request gets a new session generated (google bots don't send cookies). Besides wasting my resources, it messes up my 'users online' count based on sessions updated in the last X

[symfony-users] symfony for web designers

2008-07-16 Thread Paulo Magalhaes
Hi, I'm looking for some slides, documentation, etc on introducing Symfony from a web designer perspective. Any information that can give a web designer more autonomy such as the Symfony directory structure, concepts of partials, slots, helpers and general layout configuration like where to add

[symfony-users] Re: Should project:enable clear cache?

2008-04-16 Thread Paulo Magalhaes
Hi, I would like to second that. Moreover, currently the log-rotate task disables the application and doesn't enable it again afterwards (btw, is this by design?). One could argue that it's easy to directly remove the lock file, but I also don't see the need to clear cache when enabling the

[symfony-users] Re: production profiling

2008-04-12 Thread Paulo Magalhaes
Hi, I've done a very simple filter I use on production to log which requests took over a certain threshold. It creates a log/APP_ENV_slow_requests.log file with times and route. Configure it in app.yml like this: log_slow_requests: status: on threshold: 200 If anyone have

[symfony-users] Re: Client Side Caching

2007-11-08 Thread Paulo Magalhaes
the ETag configuration can be tweaked not to use inode number in it's calculation. Other than that, I'm not aware of any other problem with ETags. Cheers, Paulo Magalhaes Jay Klehr wrote: Regarding E-Tags, Yahoo! recommends to turn them off unless you truly know how to configure your webserver

[symfony-users] Re: PHP Development tool

2007-07-15 Thread Paulo Magalhaes
Hi, I personally recommend downloading easyeclipse (php distribution). Unless you already have a very customized installation of eclipse, getting easyeclipse will get you an eclipse with all the nice extras out of the box: subversion, syntax coloring, quantum db, tidy, xml editor, and a bunch