Commit graph

562 commits

Author SHA1 Message Date
nate
819cd1d667 Re-removing the Auth vulnerability re-introduced in [6593]
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6595 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-20 19:18:52 +00:00
phpnut
47eb421091 "Adding fix to Auth::identity(); for errors thrown on invalid input.
Added tests for invalid input.
Debug is turned off in this area of code because of the CakePHP errors handling, messages could cause long delays and exception noticed when debug > 0."

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6593 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-20 07:17:37 +00:00
phpnut
f6652d1b73 "Removing checks in Component::init(); to check for Security component.
Changed AuthComponent::startup() so that the password key $this->data is set to null when login fails instead of being unset."

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6589 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-17 02:31:55 +00:00
phpnut
ecfd70052d "Fixes #4353, SecurityComponent's requireLogin not working if URL spelled different than defined action name
Was not able to reproduce this on local system running php 5, more then likely this is a php 4 issue and not php 5 like ticket suggests.
"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6588 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-17 02:28:04 +00:00
nate
38c7dab9f5 Fixing RequestHandlerComponent::prefers() when using extensions, fixes #4056
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6575 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-15 05:48:56 +00:00
nate
a9378fb681 Adding performance optimizations to dispatch cycle
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6570 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-15 05:04:36 +00:00
phpnut
57918f4199 "Fixing Controller::output; to allow access to the content in Contorller::afterFilter();"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6554 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-10 13:24:36 +00:00
phpnut
5374807164 "Fixes #3846, Security blackhole when no radio selected
Fixes #3920, Multiple select w/ checkboxes issues warning when all are unselected
Fixes #3962, validation POST never pass when select multiple is submit
"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6546 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-10 00:25:59 +00:00
phpnut
63144591c6 "Fixes #3820, Email Component only sends message if using template and layout.
Fixes #4019, email component: attaching file is broke, fixes undefined variable, allows full paths to attachment.
Fixes #4171, Email Component: Lost a head line 'period' via SMTP method.
"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6522 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-08 20:26:16 +00:00
the_undefined
885b41808f Fixed return value for Controller::setAction
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6508 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-04 23:44:50 +00:00
nate
ab50975306 Correcting UPDATE query generation to support SQL standards and MySQL-specific features in parallel, fixes #4080
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6491 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-03-01 03:12:12 +00:00
gwoo
d3e2d51cbc updating error handling, error.test, view.test, theme.test, change socket.test to use App::import()
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6479 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-02-27 21:22:40 +00:00
nate
bd2ac9a1c1 Fixing Auth component so login still works when you allow('*'), fixes #4159
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6473 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-02-24 03:20:43 +00:00
nate
d301d7a566 Adding Flash client detection to RequestHandler
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6460 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-02-14 05:32:46 +00:00
nate
f3355bd74b Removing all references to deprecated 'webservices' and 'bare' routes and route parameters, removing deprecated constants, updating core tests
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6453 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-02-11 06:18:41 +00:00
nate
3e36695b1f Adding RequestHandlerComponent::beforeRedirect() callback to handle Ajax redirects, delaying initialization of content-types, fixes #2680
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6445 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-02-07 00:03:59 +00:00
gwoo
0a52e958b9 adding patch for component initialize, fixes #4000
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6440 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-02-06 07:47:42 +00:00
nate
71bd08b950 Refactoring Auth / Security::hash()
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6426 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-02-02 04:51:49 +00:00
nate
377643cf2b Adding deprecation warning to Controller::cleanUpFields()
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6413 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-28 01:14:05 +00:00
nate
d9691a19c8 Refactoring Router::mapResources(), adding tests for REST routing and HTTP method overrides
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6409 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-26 08:50:06 +00:00
phpnut
7098c5558c "Fixes #3887, Controller::modelClass incorrect when using AppController::uses"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6384 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-16 18:09:25 +00:00
phpnut
654669d48f "Refactoring Component tests.
Removed Component::!__construct();"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6374 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-13 04:06:01 +00:00
phpnut
11afd24c19 "Adding fix when a component loads a component that is also in the components array list.
{{{
	var $components = array('Auth', 'RequestHandler');
}}}
Controller::RequestHandler; would not be available.
Added additional tests

Fixed loading of libs/xml.php "

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6372 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-13 03:53:01 +00:00
gwoo
d564eda38d updating component and tests for Session
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6371 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-13 00:53:45 +00:00
gwoo
e989625316 update loading of components, fixes #3899, tests added
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6368 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-12 17:35:12 +00:00
gwoo
edcdcf3235 updating form helper labels for multiple records, fixes #3880, updating custom acl component loading, #3875
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6358 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-10 23:13:53 +00:00
phpnut
e7c4233963 "Fixing bug with scaffold and valid Session id check"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6346 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-09 04:51:12 +00:00
phpnut
c8172ed96a "Fixes #3851, Acl component fails to check() if a permission is denied in action (*)"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6342 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-09 00:39:00 +00:00
phpnut
43eab108c7 "Fixes #3811, $_SESSION not found
Fixes #3823, Session not restarted after instantiating new SessionComponent
Fixes #3850, Configuration Session.start and SessionComponent::!__active aren't handle correctly"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6341 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-08 15:46:02 +00:00
gwoo
2c4a8f4131 updating component, removing use of Router not needed anymore, fixes #3858
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6335 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-08 03:59:01 +00:00
phpnut
348df0fca2 "Fixes #3849, Deprecated loadView() call in email component when using theme"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6333 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-08 02:48:07 +00:00
phpnut
c47700d8c4 "Removing call to Controller::_initComponents(); and Controller::__mergeVars(); out of Dispatcher"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6322 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-05 01:31:15 +00:00
phpnut
aa32649c02 "Closes #2608, CSRF usability problems
Closes #3436, Security Component and multiple instances of the webapp"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6301 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-02 00:38:35 +00:00
phpnut
cb53dc61b0 "Closes #2897, Built-in file validation.
Implemented Validation::extension(); and Vaidation::range();
Updated copyright notices in all files"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6296 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-01 22:18:17 +00:00
nate
5abe66289d Implemented 'counterCache' and 'counterScope' for belongsTo associations
Exempted 'created', 'updated' and 'modified' fields from whitelist when saving, closes #3720
Updated Model::bind(), closes #2355
Adding Model::saveAll() to save multiple records and associated records, closes #3615
Replacing Model::generateList() with Model::find('list'), deprecates Model::generateList()



git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6295 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-01 19:34:40 +00:00
phpnut
1aa2324e8e "Fixes #3786, Missing keys when Model merges actsAs.
Added additional test for Set::merge();
Refactored Controller::_mergeVars."

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6292 3807eeeb-6ff5-0310-8944-8be069107fe0
2008-01-01 01:07:24 +00:00
phpnut
013133457c "Fixes #3768, Controller loads wrong model when plugins controller has the controller name of a main model.
moved merging of components, helpers, and uses vars to Controller::_mergeVars(); fixes bug with PluginAppController vars not being merged before components are loaded.
  Added call to Controller::_mergeVars(); in Dispatcher::dispatch();"

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6291 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-31 23:27:14 +00:00
phpnut
0644112ca9 "Closes #3560, edit form use PUT so SecurityComponent::validatePost() don't call on submit"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6259 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-25 10:49:29 +00:00
phpnut
6fe54aa1d0 "Reverting 5254, this change is only for 1.2 branch"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6255 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-25 09:55:59 +00:00
phpnut
f9c1058a20 "Closes #3295, Centralize encoding / charset setting in one Configure setting"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6253 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-25 09:08:36 +00:00
phpnut
69b2ad7556 "Closes #3338, Allow AuthComponent::allow to take an array as an argument"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6251 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-25 08:11:26 +00:00
phpnut
b96a3a2e6f "Closes #3216, Allow condition overrides in AuthComponent::identify()"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6248 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-25 07:33:29 +00:00
phpnut
1489239252 "Closes #2215, Santize Class and EmailComponent need some header injection protection and cleaning"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6244 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-25 05:30:54 +00:00
phpnut
877cf930ad "Fixes #3748, Auto loading model classes fail in plugins when using $uses in the AppController"
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6211 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-23 06:45:26 +00:00
gwoo
17610a5287 closes #3302, Render is to meant to output and allow the program to continue executing. Redirect generally serves to stop the program and start fresh with something new. This changeset makes exit the default behavior on redirect.
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6208 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-23 01:17:48 +00:00
gwoo
9f8b4b2cd5 updating scaffold view handling
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6181 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-21 18:14:10 +00:00
gwoo
60f4dd360d updating View and Controller::flash, fixes #3749, tests added
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6177 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-20 01:19:19 +00:00
gwoo
67bbb0e93e refactoring view classes, added ScaffoldView that extends ThemeView in scaffold.php, adding tests, adding test_app with files
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6155 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-14 22:20:44 +00:00
nate
9d58121205 Removing trailing slash from normalized URLs in AuthComponent, moving AuthComponent::_normalizeURL() to Router::normalize(), refactoring (Ticket #3042)
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6145 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-13 07:03:59 +00:00
gwoo
b6b2696488 allowing RequestHandler to load helpers for extension from any path, closes #2230
git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@6141 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-12-11 03:01:46 +00:00