Commit graph

27 commits

Author SHA1 Message Date
phpnut
8be685504e Adding ability to disable specific form data fields from being added to the validation key.
Example of using this would be javascript that changes hidden fields, adding additional fields added using javascript, etc.
This is set in a Controller::beforeFilter().
Example usage:
{{{
$this->Security->disabledFields = array('fieldname', 'additional fields');
$this->Security->disabledFields = array('Model.fieldname', 'OtherModel.fieldname');
}}}

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4978 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-02 02:31:06 +00:00
phpnut
874f06a165 Adding fix for forms that pass an empty value for a hidden field
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4976 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 17:42:09 +00:00
phpnut
7982208113 Reverting changes in last commit
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4975 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 15:17:27 +00:00
nate
154e3ccbb1 Refactoring FormHelper token generation
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4974 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 15:03:35 +00:00
phpnut
29511659a2 Refactoring SecurityComponent
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4972 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 13:09:35 +00:00
phpnut
3f86d27fd7 Fixing typo
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4971 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 10:36:27 +00:00
phpnut
d1701327f8 Adding hidden field values to hash. This will prevent altering of hidden fields in a form when using the FormHelper and adding the var $components = array('Security'); to a controller or the AppController to use by all child controllers
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4969 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 10:13:01 +00:00
phpnut
57023720e6 Adding form security enhancements.
Forcing checking of Session form token if security component is used.
Enhancement will not allow a form to be submitted if the fields in the form created with the FormHelper do not match the fields in the submitted form.

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4968 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 08:56:02 +00:00
nate
bb8c52dac0 Fixing display of core error messages
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4877 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-18 16:39:11 +00:00
nate
994cfd3c89 Fixing token key regeneration on requestAction calls (Ticket #2282)
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4682 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-26 18:13:52 +00:00
phpnut
a8a91e35be Correcting all headers in the files
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4407 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-02 10:39:45 +00:00
phpnut
4f1c5ef386 Wrapping all core messages in translation function
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4129 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-12-22 22:49:47 +00:00
nate
403ff35bdb Refactoring code and updating docblocks in Security and RequestHandler components
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4075 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-12-06 20:37:12 +00:00
nate
33d07d0af9 Refactoring RequestHandler, and updating docblocks for RequestHandler and Security components
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4048 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-12-01 23:51:43 +00:00
phpnut
881dc728cf Adding missing doc comments.
Updated use of Controller::persistModel; Lazy Loading of models now work when this is set to true.
Fixed Scaffold to work with Controller::persistModel = true;

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4003 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-11-28 06:25:11 +00:00
phpnut
d7e8a20b19 Adding missing doc comments to SecurityComponent.
Reformatted code to standards

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4000 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-11-28 00:00:23 +00:00
nate
e8751b7103 Refactoring Security component
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@3947 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-11-23 23:06:19 +00:00
nate
97753554c6 Adding Security::requireSecure() to require controller actions to be accessed via SSL-secured connections
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@3839 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-11-08 02:18:41 +00:00
phpnut
0e527f46bf Reomved doc block comment from FormHelper class.
Corrected change made to the $expires variable


git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@3358 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-08-04 08:07:50 +00:00
phpnut
d0d1ce73cd Added FormHelper::create() to use in place of deprecated
HtmlHelper::formTag().
Fixed SecurityComponent so the _Token can be wrote to sessions



git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@3357 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-08-04 08:03:39 +00:00
nate
2b69e99ae3 Refactoring View and SecurityComponent
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@3327 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-07-31 23:55:29 +00:00
nate
f367ec5509 Fixing typo in Security component constructor
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@3203 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-07-05 14:23:21 +00:00
gwoo
e941e48a07 fixing bug in requireLogin check of SecurityComponent::stratup()
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@3169 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-06-24 05:18:07 +00:00
nate
f809a0652d Refactoring SecurityComponent callbacks
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@3121 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-06-16 20:06:11 +00:00
nate
06c626c113 Adding SecurityComponent::requireLogin() - Supports basic and digest HTTP authentication, for Ticket #571
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@3120 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-06-16 19:45:33 +00:00
phpnut
e5c074a0dc Merging fixes into 1.x.x.x branched code:
Revision: [2955]

Revision: [2951]

Revision: [2918]

Revision: [2911]

git-svn-id: https://svn.cakephp.org/repo/branches/1.x.x.x@2958 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-05-26 05:29:17 +00:00
phpnut
0f8f8243d5 Added SecurityComponent class missed in merge from revision [2186]
git-svn-id: https://svn.cakephp.org/repo/trunk/cake@2249 3807eeeb-6ff5-0310-8944-8be069107fe0
2006-03-12 00:03:24 +00:00