Commit graph

277 commits

Author SHA1 Message Date
nate
154e3ccbb1 Refactoring FormHelper token generation
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4974 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 15:03:35 +00:00
phpnut
29511659a2 Refactoring SecurityComponent
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4972 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 13:09:35 +00:00
phpnut
3f86d27fd7 Fixing typo
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4971 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 10:36:27 +00:00
phpnut
d1701327f8 Adding hidden field values to hash. This will prevent altering of hidden fields in a form when using the FormHelper and adding the var $components = array('Security'); to a controller or the AppController to use by all child controllers
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4969 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 10:13:01 +00:00
phpnut
57023720e6 Adding form security enhancements.
Forcing checking of Session form token if security component is used.
Enhancement will not allow a form to be submitted if the fields in the form created with the FormHelper do not match the fields in the submitted form.

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4968 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 08:56:02 +00:00
phpnut
166132ca10 Moving all acl related models to model/db_acl.php.
Removing components/models directories
Changing the ACL_FILENAME setting in core.php

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4960 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 01:49:51 +00:00
phpnut
7111d292fd Moving AclBase class to the acl.php file.
Removing components/iniacl directory.
Removing acl_base.php file.

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4959 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 01:23:21 +00:00
phpnut
8780af05a3 Restructuring locations of acl related classes
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4958 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 01:16:27 +00:00
phpnut
6d439f0f44 Adding fix for #2510, Use shorter names for attached files in EmailComponent
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4957 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-05-01 00:44:19 +00:00
phpnut
815b159ab3 Adding fix for #2478 corrects issue on php 4
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4921 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-29 08:56:10 +00:00
phpnut
91d4b05e9b Adding fix for #2419 fixes issue with long lines in email messages breaking links
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4910 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-29 04:16:43 +00:00
phpnut
575dafe60a Fixing error when using AuthComponent and DEBUG < 1
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4879 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-24 00:26:10 +00:00
nate
bb8c52dac0 Fixing display of core error messages
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4877 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-18 16:39:11 +00:00
nate
4e8a803e81 Fixing SQL error in AuthComponent::identify() when username is empty (Ticket #2402)
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4847 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-12 02:32:16 +00:00
nate
b0307904ae Fixing (moving) session string warning (Ticket #2377) and adding automatic logging code
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4846 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-12 00:34:16 +00:00
nate
0c43266ba7 Adding user check fix for AuthComponent::isAuthorized(), and removing comments from Model test (Ticket #2381)
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4833 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-10 16:48:45 +00:00
phpnut
56451426fb Adding fix for Ticket #2317.
Added ability to cache queries to Model::query() by passing true as a second param.
Before this method would turn off caching automatically and there was no way to turn it on.

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4784 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-05 16:50:03 +00:00
phpnut
6593be8239 Adding fix to EmailComponent::_ _createHeader() that corrects addresses that are set in CC being added to BCC also
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4755 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-04 07:46:04 +00:00
phpnut
dcac88825a Adding fix for Ticket #2339
Adding fix for Ticket #2335
Adding fix for Ticket #2344

Merged changes in dbo from 1.2 to 1.1
Merged changes to session handling in 1.2 to 1.1
Merged changes to Model::_ _saveMulti() in 1.2 to 1.1
Added Set::pushDiff() to append differences in array 2 to array 1
Added SessionComponent::activate() and SessionHelper::activate() to turn sessions usage on if AUTO_SESSION is set to false
Added test for Ticket #2343
Added change to AclNode to use correct table naming
Added garbage clean up to CakeSession::_ _close(); some installs, like Debian, have removed garbage clean
up and use a cron job instead. Currently this change is only supported for database session.

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4752 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-04 07:25:48 +00:00
phpnut
8cead38c69 Adding var $layout to EmailComponent
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4743 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-03 01:15:24 +00:00
phpnut
32c3001fbe Fixing EmailComponent::_ _formatAddress() was not returning $string
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4742 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-03 01:08:49 +00:00
nate
456baf5da1 Refactoring AuthComponent password hashing
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4741 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-02 20:00:56 +00:00
nate
a702d4d41a Adding Ajax rendering fix for Ticket #2323
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4735 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-04-01 15:19:54 +00:00
nate
9e1019787b Moving session flash rendering from component to helper (fixes errors when using setFlash() in beforeFilter)
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4719 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-31 19:37:59 +00:00
phpnut
f1c1c70664 Adding fix for Ticket #2298.
Added encoding wrapper for email addresses.

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4702 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-28 22:57:07 +00:00
nate
1685fe8fc4 Refactoring RequestHandler
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4694 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-27 05:02:40 +00:00
phpnut
9ace567e8e Adding test for Validate::ip().
Fixed Ticket #2298.
Fixed issue with I10n class not setting default language

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4689 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-27 02:59:22 +00:00
nate
994cfd3c89 Fixing token key regeneration on requestAction calls (Ticket #2282)
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4682 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-26 18:13:52 +00:00
phpnut
7737224368 Adding fix for Ticket #2291
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4676 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-25 18:16:24 +00:00
nate
1bf81bbee9 Fixing URL normalization for AuthComponent redirects
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4663 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-23 16:46:19 +00:00
nate
b89757a3af Refactoring AuthComponent::hashPasswords()
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4641 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-21 15:40:46 +00:00
nate
6e77abb3ca Implementing AuthComponent::$logoutAction
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4640 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-21 05:55:04 +00:00
nate
729c75affe AuthComponent::isAuthorized() now returns true if valid authorization requirement is disabled
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4612 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-14 20:53:14 +00:00
nate
7c65f4c6a2 Adding patch for multipart boundary formatting (thanks sdevore)
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4600 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-08 02:01:29 +00:00
nate
8131f2a55c Adding core load error in webroot/index, and updating setting for debug reference in Auth
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4591 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-05 15:14:35 +00:00
nate
5964d074c5 Updating HttpSocket::serialize() to use Router::queryString(), updating Auth to use salted hashes, and resolving RequestHandler conflict for Ajax-based requests to custom content types
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4566 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-03-02 20:41:10 +00:00
nate
e24b44e266 Fixing AuthComponent::redirect() to redirect back to $loginRedirect instead of $loginAction
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4544 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-20 17:45:41 +00:00
phpnut
43db90d1b9 Adding fix for secure cookie not being destroyed
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4541 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-20 06:41:54 +00:00
nate
64bbd74c85 Refactoring ACL and tree code for query optimization changes
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4521 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-15 06:09:20 +00:00
nate
4c24c7b784 Updating core Auth/ACL error messages
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4518 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-14 20:04:00 +00:00
nate
c78b777db7 Optimizing ACL node querying
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4517 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-14 07:26:42 +00:00
phpnut
b6bc6d6033 Refactoring SessionHelper and SessionComponent
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4514 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-12 22:29:49 +00:00
nate
eaa0881285 Adding Model::bindNode() callback for optional authorization aliasing
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4513 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-12 21:56:06 +00:00
phpnut
53254d9a0f Refactoring SessionHelper and SessionComponent
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4512 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-12 21:46:17 +00:00
phpnut
2847ba7f82 Refactoring CakeSession to remove eval()
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4511 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-12 21:20:30 +00:00
nate
73fdbfe8c5 Implementing controller (CRUD)-based authorization
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4508 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-12 05:05:31 +00:00
phpnut
0db06d9fdb Refactoring SessionComponent::write() to allow the first param to be an array.
Removing eval() from CakeSession::returnSessionVars() and CakeSession::readSessionVar() 

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4506 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-12 00:57:44 +00:00
nate
5b85b87dc3 Refactoring Auth
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4505 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-11 18:09:27 +00:00
nate
d312737d84 Updating AclComponent for distributed ACL system
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4503 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-11 00:29:23 +00:00
nate
2a954b5fbf Refactoring ACL system to require less model code
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@4502 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-02-10 22:59:08 +00:00