Commit graph

524 commits

Author SHA1 Message Date
gwoo
f7dd0800d1 fixes #6062, AuthComponent and Controller::scaffold
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@8018 3807eeeb-6ff5-0310-8944-8be069107fe0
2009-02-06 23:23:12 +00:00
the_undefined
27065d7aab Fixed bug in AuthComponent that allowed uppercase actions to pass checks
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@8011 3807eeeb-6ff5-0310-8944-8be069107fe0
2009-01-26 18:50:09 +00:00
mark_story
ba42eb05c1 Fixing broken tests refs #5687
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7986 3807eeeb-6ff5-0310-8944-8be069107fe0
2009-01-14 20:37:31 +00:00
gwoo
e496fc9434 updating auth component and test with additional checks for missing data
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7979 3807eeeb-6ff5-0310-8944-8be069107fe0
2009-01-14 05:21:26 +00:00
mark_story
6c258c0f93 Fixing Auth's handling of params when loginAction is an array. Tests updated. Fixes #5961
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7972 3807eeeb-6ff5-0310-8944-8be069107fe0
2009-01-06 03:20:11 +00:00
gwoo
0751251181 updating email tests to match previous change.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7970 3807eeeb-6ff5-0310-8944-8be069107fe0
2009-01-02 22:50:28 +00:00
gwoo
4f0256f9cd fixes #5904, changing email component to use initialize instead of startup, so it can be used in other components more easily
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7969 3807eeeb-6ff5-0310-8944-8be069107fe0
2009-01-02 22:47:38 +00:00
nate
b2b46c3fa4 Implementing $safe mode for RequestHandlerComponent::getClientIP(), which ignores HTTP_X_FORWARDED_FOR, fixes #5842
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7957 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-12-25 22:02:36 +00:00
nate
d5b157ed94 Fixing undefined variable in first if block branch, fixes #5921
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7954 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-12-24 05:40:05 +00:00
mark_story
ac87db981a Fixing typos in doc blocks. Fixes #5898
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7941 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-12-18 14:31:53 +00:00
nate
3129d5411f Correcting return value for Auth::redirect(), fixes #5893
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7930 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-12-17 07:30:55 +00:00
nate
2c64c449bc Correcting Flash detection in RequestHandler, adding tests. Fixes #5838.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7914 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-12-10 13:55:58 +00:00
AD7six
b43128c809 Ensuring that the auth component never redirects to an external link.
Tests updated to match code changes and tests added for external referer examples


git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7874 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-11-14 09:07:22 +00:00
TommyO
11f0817341 Improved strip method for performance and clarity.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7866 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-11-11 19:54:15 +00:00
gwoo
a99ca57762 fixes #5687, adding Controller::methods to hold available methods for called controller, refactored auth and dispatcher to use this property
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7864 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-11-11 16:34:05 +00:00
mariano.iglesias
dde4906195 Adding patch by dardosordi. Making all calls to header in SecurityComponent go through Controller. Fixing issue where invalid basic auth credentials would not trigger another login request. Added tests, fixes #5732
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7858 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-11-10 17:18:00 +00:00
AD7six
3f2fa6929b changing tabs for spaces in comment block indentation
Removing address and replacing with cakefoundation url


git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7805 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-10-30 17:30:26 +00:00
nate
318c2b4952 Correcting SecurityComponent form hash generation when handling arrays, fixes #5588. Fixing code formatting in FormHelper test.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7794 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-10-29 06:55:42 +00:00
nate
16e2579f01 Correcting Security component to treat POST data arrays as a single field for validation purposes, fixes #5588
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7774 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-10-23 03:18:08 +00:00
mark_story
1b456f2cf1 Applying patch from 'davidpersson' fixing code spacing. Closes #5643
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7772 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-10-23 00:10:44 +00:00
TommyO
f5a8ce4612 Fixed bug where bcc was visible to all recipients when using smtp
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7766 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-10-20 17:09:42 +00:00
nate
1b9357f5e8 Correcting behavior of layering allow/deny calls in AuthComponent, fixes #5595, formatting fixes for RequestHandler
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7743 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-10-15 02:52:19 +00:00
mark_story
c128505a2c Adding read() into CookieComponent::del() so that values will always be populated. Reversing change from [7725]. Fixes #5563
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7729 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-10-10 17:24:10 +00:00
mark_story
aa217716b9 Applying patch from 'halogenandtoast' Fixes issues with deleting cookie values before read() is used. Closes #5563
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7725 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-10-10 01:16:04 +00:00
mark_story
136f9c4b6d Removing getAco(), getAro(), setAco(), and getAco() from AclComponent. These methods were deprecated and not removed. Refs #5561
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7716 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-10-09 03:35:17 +00:00
TommyO
d5dbb7ba32 Fixed problem where already-authorized user was failing.
Added return of respond code found on success, allowing for more fine-grained post-query activity.

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7714 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-10-08 17:53:48 +00:00
TommyO
3da0451907 Added basic mb_encode_mimeheader() to Multibyte class.
Modified EmailComponent to take advantage of multibyte support. fixes #5448
Modified EmailComponent to fix newline issues in long subject lines when using mail send method. fixes #5049

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7685 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-10-01 18:36:38 +00:00
gwoo
e6b994bcb1 updating handling of required classes, fixes #5480
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7666 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-26 14:03:16 +00:00
mark_story
62168bfe0f Updating doc blocks to include access and return PHPDOC tags.
Removing use of e() in Debugger.
Fixing code formatting in CookieComponent
Closes #5477

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7662 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-25 16:49:56 +00:00
nate
eb7fb6d7e3 Re-implementing form hashing security to using string-based keying. Fixes #5262, fixes #5300
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7658 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-24 23:02:14 +00:00
nate
fc5b128d68 Refactoring Auth test, adding coverage, and enabling custom Ajax layouts (as specified by RequestHandler), fixes #5446
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7637 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-20 20:18:16 +00:00
nate
91838d6d5d Fixing bug in RequestHandler::prefers() not respecting accept order for single items, test case updated
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7634 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-19 19:48:22 +00:00
mark_story
0f9a4e0470 Optimizing in_array() checks to isset().
No more in_array($a, array_keys($b)) patterns exist.
Closes #5161

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7624 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-18 03:40:28 +00:00
phpnut
8ae5866a1c Additional optimization refactoring
Removed ability to use deprecated / with plugin, helper, etc combinations. The dot notation is only allowed from this point forward.
Corrected tests for the above changes.
Corrected formating in basics.php

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7623 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-18 03:09:19 +00:00
nate
e3d7aee9da Adding option to disable POST data validation in Security component, fixes #5412
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7617 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-17 15:27:41 +00:00
nate
14b17fed39 Changing private methods in Security component to protected
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7611 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-16 01:39:20 +00:00
phpnut
2b95df3abf Additional optimization refactoring
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7597 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-13 18:59:30 +00:00
phpnut
cb487bd6e6 More optimization refactoring.
Fix cache but causing  object_map to be created and deleted on each request.
Replacing function and method calls with better performing code.

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7596 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-12 05:11:34 +00:00
nate
c9c18741fb Small security fix for Auth component when invalid Ajax request is triggered with no $ajaxLogin set
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7595 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-12 02:10:55 +00:00
DarkAngelBGE
19d4f3d596 adding a couple 'return home early' refactorings
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7572 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-08 20:33:48 +00:00
DarkAngelBGE
2deb6f3828 fixing possible notices in SecurityComponent::__validatePost, closes #5232
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7545 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-09-02 04:04:49 +00:00
mark_story
c58e58a491 Adding tests for secured forms. Fixes the issues related to checkboxes in multi row forms.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7533 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-08-29 03:11:35 +00:00
mark_story
9895f6d39b Added check in AuthComponent::hashPasswords() to ensure that data is an array. Tests Added.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7492 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-08-24 15:18:37 +00:00
TommyO
fe62d7f70d Allow smtp response to be handled more efficiently by Socket class.
Parse test for smtp response checks more accurately at the beginning of the response.
Fixes #5062.

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7461 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-08-13 16:06:23 +00:00
mark_story
3a06f840c3 Adding patch from 'dardosordi' fixes RequestHandler type detection with character set. Closes #5223
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7448 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-08-09 18:32:59 +00:00
TommyO
48f55a0f56 Greatly modified the way newLine characters are handled.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7437 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-08-05 17:02:22 +00:00
gwoo
b0d2451a97 removing optional instantiation of Set class. Adding toArray() to xml class and calling it from Set::reverse(); updated test cases.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7398 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-07-31 23:50:32 +00:00
gwoo
4a5282bcd7 closes #5172, AuthComponent login with with UUID
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7396 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-07-31 19:00:12 +00:00
TommyO
b6e9888753 Replaced all instances of ife() in /cake
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7387 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-07-30 20:34:01 +00:00
TommyO
e235e422ed log fix: Committed in error. No real changes made to file.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7360 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-07-24 13:52:37 +00:00
phpnut
30a49a39e4 Fixes #5016, Security->disabledFields not working properly. Empty value arrays needed to be unset
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7314 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-07-05 10:10:19 +00:00
gwoo
5ddd330b11 closes #5019, updating test case to show that security component is operating as expected. fix for newLine in utf subject of email component
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7311 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-07-04 14:18:01 +00:00
phpnut
815c6fb1f5 Fixes #4997 CookieComponent write multiple values doesn't not obey $encrypt
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7291 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-06-27 07:14:55 +00:00
nate
df75a06756 Fixing coding standards violations in core, and adding misc tests
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7222 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-06-20 20:17:23 +00:00
gwoo
2999b7f15d fixes #4902, email smtp headers
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7180 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-06-13 18:03:47 +00:00
gwoo
e9daddddf3 fixes #4910, aclnode loading
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7179 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-06-13 16:40:45 +00:00
gwoo
1e231e9511 some cleanup, wrapping uses() in class exists
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7172 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-06-11 15:46:31 +00:00
phpnut
6807d4c333 Starting initial refactoring of current code base.
Made changes to test suite to allow running test without headers already sent errors.
Moved Component::initialize(), Controller::beforeFilter(); and Component::startup(); from Dipatcher::start() to Controller::constructClasses();
Removed Dispatcher::start();
Fixing model instances not being created
Adding additional test to CookieComponent to increase coverage to 95%
Optimizing Set::diff();
Fixing SessionComponent test and RequestHandlerComponent test
Fixing CakeSession tests, removed deprecated code from CakeSession

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7162 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-06-10 22:38:05 +00:00
phpnut
cbebf3e6b3 Adding fix for new line endings when sending email via php mail();
Fixed typo __headers should have been __header

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7149 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-06-09 23:35:38 +00:00
gwoo
76acfafa5a fixes #4848, console building paths when config does not exist.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7138 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-06-07 22:09:40 +00:00
gwoo
bd7b09e629 updating email component, proper fix for [7052]
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7134 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-06-06 18:31:11 +00:00
gwoo
b3f605c1d8 fixes #4836 components initialize for error pages, also changing Object::stop() to Object::_stop()
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7116 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-06-04 19:04:58 +00:00
gwoo
6affb7f70a updating EmailComponent, making lineLength public, deprecating protected _lineLength, default value of 70, updating docblocks,
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7105 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-06-03 17:26:30 +00:00
nate
39feb3f7c1 Refactoring DboSource. Model array conditions must now have comparison operators on the left side, fixes misc bugs, updated core to reflect changes
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7075 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-31 12:36:38 +00:00
gwoo
c57b5611a0 adding patch for Acl::allow(), fixes #4792, closes #4781
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7072 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-31 04:31:30 +00:00
gwoo
cf896eaa9b refactoring component handling, closes #4795, tests added. deprecated Controller::_initComponents();
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7070 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-31 03:54:22 +00:00
nate
42da5aba81 Moving Cake folder to correct location
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7063 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-30 11:40:08 +00:00
DarkAngelBGE
e6e0d852a2 deleting cake folder from svn
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7061 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-30 10:59:16 +00:00
TommyO
67f2255076 Fixed minor bug in connect communications with SMTP server
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7059 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-29 20:43:13 +00:00
TommyO
ecc4347e25 Fixed bug for Authenticating against SMTP server. Added test case.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7058 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-29 17:26:43 +00:00
TommyO
a89feed085 EmailComponent reference twekaed to be more PHP4 friendly
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7055 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-28 15:28:47 +00:00
TommyO
3670598052 Adapted EmailComponent SMTP sends to use CakeSocket for communications
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7053 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-28 15:17:18 +00:00
TommyO
ee113b7a5c Fixes bugs in EmailComponent where multiple sends will duplicate headers and content. Makes debug more consistent with sends.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7052 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-28 14:59:13 +00:00
nate
9eeecc8755 Adding content stripping fix for email component, fixes #4753
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7043 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-25 18:08:55 +00:00
mark_story
dcdfdb3cbe Updated Auth redirect url generation. Now correctly retains passedArgs and namedParams. Added tests for this behavior. Closes #4750
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7040 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-24 22:43:19 +00:00
joelmoss
cedb20e612 Replaced all instances of renderElement() with element(). Fixes #4740
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7017 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-22 23:04:36 +00:00
nate
bccfd41291 Adding creation fix for ACL join records, fixes #4478
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7016 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-22 19:16:54 +00:00
gwoo
aaab0306aa removing exit() and replace with $this->stop();
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@7012 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-22 16:57:46 +00:00
nate
6c5f98ddec Fixing ACL interface class names
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6999 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-22 02:00:36 +00:00
DarkAngelBGE
45bccc5215 optimization refs #3415
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6970 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-19 20:36:39 +00:00
the_undefined
abe853a978 Made Auth component find conditions more explicit, closes #4680
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6936 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-18 23:49:51 +00:00
nate
8313fef72d Changing recursive setting in Auth user lookup query, allows $userScope to use joins, fixes #4665
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6919 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-18 04:49:54 +00:00
gwoo
8124d166ff updating auth url for login actions
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6904 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-16 18:17:04 +00:00
gwoo
8a236492a0 adding Object::stop(), updating auth and auth.test to use
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6901 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-16 15:23:00 +00:00
gwoo
1623fa89f8 updating auth, fixes #4417 ajaxLogin rendering
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6893 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-15 19:20:13 +00:00
the_undefined
bf107d1886 Fixed admin routing redirect in AuthComponent
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6886 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-15 07:06:22 +00:00
DarkAngelBGE
11ba82430a removing unneeded lines from RequestHandler,
adding error surpression oeprator in front of header() to make the components group pass (RequestHandler class)

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6846 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-13 14:38:01 +00:00
DarkAngelBGE
4b91712791 bringing security component up to 84% coverage,
internationalizing trigger_error for security lib

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6835 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-13 06:27:43 +00:00
the_undefined
24d8878ab6 Added CAKEPHP_SHELL constant to shell dispatcher making it easy to recognize when in shell mode
Fixed #4599

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6834 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-13 05:23:57 +00:00
the_undefined
451192018a Improved AuthComponent to use an array to match the login action, fixes #4572
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6830 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-05-13 03:22:34 +00:00
nate
296e8989ba Adding GET/PUT/DELETE method checks to Security component, refactoring adding tests, closes #4231. Thanks joelmoss.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6703 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-04-19 19:25:49 +00:00
mariano.iglesias
ab3b90503f Fixing issue in Security component with modeless field names, fixes #4454. Thanks vuego for the test and patch!
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6685 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-04-17 22:51:40 +00:00
mariano.iglesias
5f967487bb Encoding subject without modifying original, fixes #4489
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6683 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-04-17 22:12:58 +00:00
nate
dc5742d28f Correcting query order in DB_ACL::check(), fixes #4309
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6654 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-04-11 05:48:39 +00:00
nate
a89beea029 Correcting issue with permissions being incorrectly overwritten in ACL, fixes #4190
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6651 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-04-10 13:19:10 +00:00
phpnut
1d9a096376 "Fixes #4427, Current protected attribute Email::_newLine renders Email Component unusable for SMTP.
Original change to EmailComponent:_newLine reverted, related bug has been fixed elsewhere in the code."

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6632 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-04-04 11:46:09 +00:00
phpnut
d14b50fc92 "References #4394, additional fixes to multi record forms.
Added additional test cases"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6629 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-04-03 06:48:56 +00:00
phpnut
5d59938121 "Correcting code block"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6628 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-04-03 02:33:41 +00:00
phpnut
f2941a660e "References #4239 Added test from ticket to showing ticket is invalid.
Fixes #4394, fails when the hasMany multi-record form contains hidden fields.
"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6627 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-04-03 02:29:17 +00:00
phpnut
358c529e7a "Fixes #4416, Email component uses invalid \"Content-Type\" for attachments.
Added fclose();
Removed unused code"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6623 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-04-02 18:57:29 +00:00
phpnut
c5f06674fa "Fixes #4394, SecurityComponent::!__validatePost fails on hasMany multi-record form.
"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6618 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-04-02 06:08:55 +00:00
phpnut
fa787aa82b "Closes #4304, EmailComponent::!__getSmtpResponse not handling multiline messages"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6601 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-26 03:49:30 +00:00
nate
819cd1d667 Re-removing the Auth vulnerability re-introduced in [6593]
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6595 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-20 19:18:52 +00:00
phpnut
47eb421091 "Adding fix to Auth::identity(); for errors thrown on invalid input.
Added tests for invalid input.
Debug is turned off in this area of code because of the CakePHP errors handling, messages could cause long delays and exception noticed when debug > 0."

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6593 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-20 07:17:37 +00:00
phpnut
f6652d1b73 "Removing checks in Component::init(); to check for Security component.
Changed AuthComponent::startup() so that the password key $this->data is set to null when login fails instead of being unset."

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6589 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-17 02:31:55 +00:00
phpnut
ecfd70052d "Fixes #4353, SecurityComponent's requireLogin not working if URL spelled different than defined action name
Was not able to reproduce this on local system running php 5, more then likely this is a php 4 issue and not php 5 like ticket suggests.
"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6588 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-17 02:28:04 +00:00
nate
38c7dab9f5 Fixing RequestHandlerComponent::prefers() when using extensions, fixes #4056
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6575 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-15 05:48:56 +00:00
phpnut
5374807164 "Fixes #3846, Security blackhole when no radio selected
Fixes #3920, Multiple select w/ checkboxes issues warning when all are unselected
Fixes #3962, validation POST never pass when select multiple is submit
"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6546 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-10 00:25:59 +00:00
phpnut
63144591c6 "Fixes #3820, Email Component only sends message if using template and layout.
Fixes #4019, email component: attaching file is broke, fixes undefined variable, allows full paths to attachment.
Fixes #4171, Email Component: Lost a head line 'period' via SMTP method.
"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6522 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-08 20:26:16 +00:00
nate
ab50975306 Correcting UPDATE query generation to support SQL standards and MySQL-specific features in parallel, fixes #4080
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6491 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-01 03:12:12 +00:00
nate
bd2ac9a1c1 Fixing Auth component so login still works when you allow('*'), fixes #4159
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6473 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-02-24 03:20:43 +00:00
nate
d301d7a566 Adding Flash client detection to RequestHandler
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6460 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-02-14 05:32:46 +00:00
nate
3e36695b1f Adding RequestHandlerComponent::beforeRedirect() callback to handle Ajax redirects, delaying initialization of content-types, fixes #2680
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6445 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-02-07 00:03:59 +00:00
nate
71bd08b950 Refactoring Auth / Security::hash()
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6426 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-02-02 04:51:49 +00:00
gwoo
edcdcf3235 updating form helper labels for multiple records, fixes #3880, updating custom acl component loading, #3875
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6358 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-10 23:13:53 +00:00
phpnut
c8172ed96a "Fixes #3851, Acl component fails to check() if a permission is denied in action (*)"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6342 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-09 00:39:00 +00:00
phpnut
43eab108c7 "Fixes #3811, $_SESSION not found
Fixes #3823, Session not restarted after instantiating new SessionComponent
Fixes #3850, Configuration Session.start and SessionComponent::!__active aren't handle correctly"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6341 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-08 15:46:02 +00:00
phpnut
348df0fca2 "Fixes #3849, Deprecated loadView() call in email component when using theme"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6333 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-08 02:48:07 +00:00
phpnut
aa32649c02 "Closes #2608, CSRF usability problems
Closes #3436, Security Component and multiple instances of the webapp"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6301 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-02 00:38:35 +00:00
phpnut
cb53dc61b0 "Closes #2897, Built-in file validation.
Implemented Validation::extension(); and Vaidation::range();
Updated copyright notices in all files"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6296 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-01 22:18:17 +00:00
phpnut
0644112ca9 "Closes #3560, edit form use PUT so SecurityComponent::validatePost() don't call on submit"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6259 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-25 10:49:29 +00:00
phpnut
f9c1058a20 "Closes #3295, Centralize encoding / charset setting in one Configure setting"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6253 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-25 09:08:36 +00:00
phpnut
69b2ad7556 "Closes #3338, Allow AuthComponent::allow to take an array as an argument"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6251 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-25 08:11:26 +00:00
phpnut
b96a3a2e6f "Closes #3216, Allow condition overrides in AuthComponent::identify()"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6248 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-25 07:33:29 +00:00
phpnut
1489239252 "Closes #2215, Santize Class and EmailComponent need some header injection protection and cleaning"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6244 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-25 05:30:54 +00:00
nate
9d58121205 Removing trailing slash from normalized URLs in AuthComponent, moving AuthComponent::_normalizeURL() to Router::normalize(), refactoring (Ticket #3042)
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6145 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-13 07:03:59 +00:00
gwoo
b6b2696488 allowing RequestHandler to load helpers for extension from any path, closes #2230
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6141 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-11 03:01:46 +00:00
phpnut
8a2b51c3ec "Removing all shortcut function usage from the core"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6128 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-08 06:08:03 +00:00
phpnut
aa86d05b96 "Fixes #2298, Mail subject is not influenced by charset-setting"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6109 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-03 00:16:27 +00:00
phpnut
586ff7201c "Fixes #3640, Auth component and i18n conflict"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6084 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-26 17:51:10 +00:00
gwoo
be8acb877a updating AuthComponent to use ClassRegistry::init()
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6068 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-24 06:13:16 +00:00
phpnut
d4a0f8300e "Fixes #3634, Email Component and PHP4. Double headers being set for To: and Subject:"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6047 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-22 17:12:03 +00:00
gwoo
d8e206b9f9 updating controller and auth, fixes #3539
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6036 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-21 17:37:55 +00:00
phpnut
c000940e36 Closes #2119 Only define clone() in PHP4 when it hasn't been already defined.
Closes #2213, Support multiple plugin paths.
Closes #2234, filepaths to behavior classes should be cached in class.paths.php also
Closes #2345, ability to group components into subfolders
Closes #2645, Improvement to basic.php for class loading.
Fixes #3526, Cache::write, when using just the config name, it fails.
Fixes #3559, loading plugin model as assoc don't work.
Closes #3567 Controller Folders (Note this does not need routing to work, but controller names can not conflict with others in the same application so naming must still be unique)
Fixes #3579, email.php component: Parse error with php 4.

Adding new class and file importer.
Updated most of the core to use the importer.
Added ClassRegsitry::init() that will create and instance of an object and store it in the registry.
Deprecated most of the load functions in basics.php
Plugin model loading now forces using the dot notation, to use models within a plugin, all the model associations must be in the PluginName.Model syntax, if this is not used, the plugin will look for the models in the main app/models directory first, if not found then it will search the plugin directories recursively until it finds a model.
	var $belongsTo = array('SomeModel'); will look for some_model.php in the app/models
	var $belongsTo = array('MyPlugin.SomeModel'); will look for some_model.php in my_plugin/models
	var $belongsTo = array('MyPlugin.MyPlugin', 'SomeModel'); will used my_plugin/models/my_plugin.php and app/models/some_model.php
	
The controllers of the plugin will still look for the default models inside the plugin if var $uses is not set:
	var $uses = array('SomeModel'); will look for some_model.php in the app/models
	var $uses = array('MyPlugin.SomeModel'); will look for some_model.php in my_plugin/models
	var $uses = array('MyPlugin.MyPlugin', 'SomeModel'); will used my_plugin/models/my_plugin.php and app/models/some_model.php

All of the above will work between plugins and main app
These changes also allow placing model and controllers is sub directories
Removed old class.paths.php file generation 

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6001 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-16 09:35:19 +00:00
phpnut
18c7a00a47 Correcting issues with Sessions and Controller::redirect()
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5999 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-16 03:52:14 +00:00
phpnut
6d867d72a9 Fixes #3547, EmailComponent: SMTP: Cc and Bcc recipients must be sent through RCPT TO - also need different formatting.
Fixes #3548, EmailComponent: SMTP: No subject, and no recipient headers.

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5985 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-12 03:26:34 +00:00
phpnut
e584f7bd0c Fixing undefined index notice when missing * errors are thrown
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5983 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-12 02:04:54 +00:00
phpnut
11d295eb0c Fixes #3507 Session Security.level "high", session destroyed on media 404.
Added ability to turn off HTTP_USER_AGENT check in a Controller::beforeFilter(),
Added id() to Session helper and component to return current Session id, the component accepts a $id parameter to force setting the Session id which must be called in a Controller::beforeFilter().
Sessions id are not longer renewed if a request is from Ajax, or from requestAction();
When Security.level (1.2) or CAKE_SECURITY (1.1) is set the 'high' renewing of Session id only happens if request is 2 seconds after the last request.
Added $_Session[Config][timeout] which forces renewing Session if request are within the 2 second limit and over 10 request.
If an application is expected to make multiple request (more than 10) to the server in a single proccess, Configure::write('Security.level', 'medium'); (1.2) or $this->Session->security = 'medium'; (1.1) should be used in a beforeFilter for the specific methods.
1.2 Sessions allow using CacheEngines to store Sessions, be aware that using memory caching as the only storage of Sessions is not reliable. Further work will be done to allow using the CacheEngines with database Sessions, etc.

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5982 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-12 01:36:20 +00:00
gwoo
70366e99e0 change error message format for i18n in Auth, closes #3539
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5976 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-09 15:41:06 +00:00
phpnut
4e163f471f Fixes #3520, EmailComponent: Doesn't catch valid SMTP authentication response.
Fixes #3521, EmailComponent: Violates SMTP protocol - "Improper use of SMTP command pipelining"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5959 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-06 06:09:06 +00:00
phpnut
1e1c49025a Fixes #3502. Minor fix to email component - leading newline bug
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5956 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-06 04:39:23 +00:00
gwoo
33ce66dd54 fixed extra space in auth msg, closes #3531
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5953 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-05 18:03:36 +00:00
nate
43ed8db5ea Cleaning up test cases
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5946 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-04 18:57:23 +00:00
nate
8f12e402df Fixing ACL test, misc ACL lookup optimizations
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5916 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-10-29 00:17:37 +00:00
gwoo
fbd3811cd1 removing usage of Model::loadInfo() replaced by Model::schema(), removing new lines at the end of some files, removed deprecated chmodr() function from basics, updated bake and scaffold views
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5912 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-10-28 04:18:18 +00:00
phpnut
f41aa80b78 Removing vars that are no longer used.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5904 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-10-27 01:32:17 +00:00
phpnut
8d6599c34b Fixing bug for related records not being returned when using $recursive > 1.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5902 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-10-26 08:40:10 +00:00
phpnut
56425c7f39 Closes #3429, scripts_for_layout are lost when you send an email with EmailComponent
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5874 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-10-22 23:52:12 +00:00
mariano.iglesias
cd4ae338cc Adding documentation for RequestHandlerComponent, SecurityComponent, and SessionComponent
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5870 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-10-22 21:22:35 +00:00
mariano.iglesias
b1f42ec4c5 Adding documentation for EmailComponent
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5869 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-10-22 21:03:47 +00:00