phpnut
8be685504e
Adding ability to disable specific form data fields from being added to the validation key.
...
Example of using this would be javascript that changes hidden fields, adding additional fields added using javascript, etc.
This is set in a Controller::beforeFilter().
Example usage:
{{{
$this->Security->disabledFields = array('fieldname', 'additional fields');
$this->Security->disabledFields = array('Model.fieldname', 'OtherModel.fieldname');
}}}
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4978 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-02 02:31:06 +00:00
mariano.iglesias
2940d81cb0
Setting replyTo and return headers only when defined
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4977 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 18:01:48 +00:00
phpnut
874f06a165
Adding fix for forms that pass an empty value for a hidden field
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4976 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 17:42:09 +00:00
phpnut
7982208113
Reverting changes in last commit
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4975 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 15:17:27 +00:00
nate
154e3ccbb1
Refactoring FormHelper token generation
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4974 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 15:03:35 +00:00
phpnut
29511659a2
Refactoring SecurityComponent
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4972 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 13:09:35 +00:00
phpnut
3f86d27fd7
Fixing typo
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4971 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 10:36:27 +00:00
phpnut
d1701327f8
Adding hidden field values to hash. This will prevent altering of hidden fields in a form when using the FormHelper and adding the var $components = array('Security'); to a controller or the AppController to use by all child controllers
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4969 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 10:13:01 +00:00
phpnut
57023720e6
Adding form security enhancements.
...
Forcing checking of Session form token if security component is used.
Enhancement will not allow a form to be submitted if the fields in the form created with the FormHelper do not match the fields in the submitted form.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4968 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 08:56:02 +00:00
phpnut
166132ca10
Moving all acl related models to model/db_acl.php.
...
Removing components/models directories
Changing the ACL_FILENAME setting in core.php
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4960 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 01:49:51 +00:00
phpnut
7111d292fd
Moving AclBase class to the acl.php file.
...
Removing components/iniacl directory.
Removing acl_base.php file.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4959 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 01:23:21 +00:00
phpnut
8780af05a3
Restructuring locations of acl related classes
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4958 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 01:16:27 +00:00
phpnut
6d439f0f44
Adding fix for #2510 , Use shorter names for attached files in EmailComponent
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4957 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 00:44:19 +00:00
phpnut
815b159ab3
Adding fix for #2478 corrects issue on php 4
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4921 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-29 08:56:10 +00:00
phpnut
91d4b05e9b
Adding fix for #2419 fixes issue with long lines in email messages breaking links
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4910 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-29 04:16:43 +00:00
phpnut
575dafe60a
Fixing error when using AuthComponent and DEBUG < 1
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4879 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-24 00:26:10 +00:00
nate
bb8c52dac0
Fixing display of core error messages
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4877 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-18 16:39:11 +00:00
nate
4e8a803e81
Fixing SQL error in AuthComponent::identify() when username is empty (Ticket #2402 )
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4847 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-12 02:32:16 +00:00
nate
b0307904ae
Fixing (moving) session string warning (Ticket #2377 ) and adding automatic logging code
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4846 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-12 00:34:16 +00:00
nate
0c43266ba7
Adding user check fix for AuthComponent::isAuthorized(), and removing comments from Model test (Ticket #2381 )
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4833 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-10 16:48:45 +00:00
phpnut
56451426fb
Adding fix for Ticket #2317 .
...
Added ability to cache queries to Model::query() by passing true as a second param.
Before this method would turn off caching automatically and there was no way to turn it on.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4784 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-05 16:50:03 +00:00
phpnut
6593be8239
Adding fix to EmailComponent::_ _createHeader() that corrects addresses that are set in CC being added to BCC also
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4755 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-04 07:46:04 +00:00
phpnut
dcac88825a
Adding fix for Ticket #2339
...
Adding fix for Ticket #2335
Adding fix for Ticket #2344
Merged changes in dbo from 1.2 to 1.1
Merged changes to session handling in 1.2 to 1.1
Merged changes to Model::_ _saveMulti() in 1.2 to 1.1
Added Set::pushDiff() to append differences in array 2 to array 1
Added SessionComponent::activate() and SessionHelper::activate() to turn sessions usage on if AUTO_SESSION is set to false
Added test for Ticket #2343
Added change to AclNode to use correct table naming
Added garbage clean up to CakeSession::_ _close(); some installs, like Debian, have removed garbage clean
up and use a cron job instead. Currently this change is only supported for database session.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4752 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-04 07:25:48 +00:00
phpnut
8cead38c69
Adding var $layout to EmailComponent
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4743 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-03 01:15:24 +00:00
phpnut
32c3001fbe
Fixing EmailComponent::_ _formatAddress() was not returning $string
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4742 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-03 01:08:49 +00:00
nate
456baf5da1
Refactoring AuthComponent password hashing
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4741 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-02 20:00:56 +00:00
nate
a702d4d41a
Adding Ajax rendering fix for Ticket #2323
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4735 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-01 15:19:54 +00:00
nate
9e1019787b
Moving session flash rendering from component to helper (fixes errors when using setFlash() in beforeFilter)
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4719 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-31 19:37:59 +00:00
phpnut
f1c1c70664
Adding fix for Ticket #2298 .
...
Added encoding wrapper for email addresses.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4702 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-28 22:57:07 +00:00
nate
1685fe8fc4
Refactoring RequestHandler
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4694 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-27 05:02:40 +00:00
phpnut
9ace567e8e
Adding test for Validate::ip().
...
Fixed Ticket #2298 .
Fixed issue with I10n class not setting default language
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4689 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-27 02:59:22 +00:00
nate
994cfd3c89
Fixing token key regeneration on requestAction calls (Ticket #2282 )
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4682 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-26 18:13:52 +00:00
phpnut
7737224368
Adding fix for Ticket #2291
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4676 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-25 18:16:24 +00:00
nate
1bf81bbee9
Fixing URL normalization for AuthComponent redirects
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4663 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-23 16:46:19 +00:00
nate
b89757a3af
Refactoring AuthComponent::hashPasswords()
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4641 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-21 15:40:46 +00:00
nate
6e77abb3ca
Implementing AuthComponent::$logoutAction
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4640 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-21 05:55:04 +00:00
nate
729c75affe
AuthComponent::isAuthorized() now returns true if valid authorization requirement is disabled
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4612 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-14 20:53:14 +00:00
nate
7c65f4c6a2
Adding patch for multipart boundary formatting (thanks sdevore)
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4600 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-08 02:01:29 +00:00
nate
8131f2a55c
Adding core load error in webroot/index, and updating setting for debug reference in Auth
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4591 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-05 15:14:35 +00:00
nate
5964d074c5
Updating HttpSocket::serialize() to use Router::queryString(), updating Auth to use salted hashes, and resolving RequestHandler conflict for Ajax-based requests to custom content types
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4566 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-02 20:41:10 +00:00
nate
e24b44e266
Fixing AuthComponent::redirect() to redirect back to $loginRedirect instead of $loginAction
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4544 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-20 17:45:41 +00:00
phpnut
43db90d1b9
Adding fix for secure cookie not being destroyed
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4541 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-20 06:41:54 +00:00
nate
64bbd74c85
Refactoring ACL and tree code for query optimization changes
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4521 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-15 06:09:20 +00:00
nate
4c24c7b784
Updating core Auth/ACL error messages
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4518 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-14 20:04:00 +00:00
nate
c78b777db7
Optimizing ACL node querying
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4517 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-14 07:26:42 +00:00
phpnut
b6bc6d6033
Refactoring SessionHelper and SessionComponent
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4514 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-12 22:29:49 +00:00
nate
eaa0881285
Adding Model::bindNode() callback for optional authorization aliasing
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4513 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-12 21:56:06 +00:00
phpnut
53254d9a0f
Refactoring SessionHelper and SessionComponent
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4512 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-12 21:46:17 +00:00
phpnut
2847ba7f82
Refactoring CakeSession to remove eval()
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4511 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-12 21:20:30 +00:00
nate
73fdbfe8c5
Implementing controller (CRUD)-based authorization
...
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4508 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-12 05:05:31 +00:00