cakephp2-php8/cake/libs
phpnut 11d295eb0c Fixes #3507 Session Security.level "high", session destroyed on media 404.
Added ability to turn off HTTP_USER_AGENT check in a Controller::beforeFilter(),
Added id() to Session helper and component to return current Session id, the component accepts a $id parameter to force setting the Session id which must be called in a Controller::beforeFilter().
Sessions id are not longer renewed if a request is from Ajax, or from requestAction();
When Security.level (1.2) or CAKE_SECURITY (1.1) is set the 'high' renewing of Session id only happens if request is 2 seconds after the last request.
Added $_Session[Config][timeout] which forces renewing Session if request are within the 2 second limit and over 10 request.
If an application is expected to make multiple request (more than 10) to the server in a single proccess, Configure::write('Security.level', 'medium'); (1.2) or $this->Session->security = 'medium'; (1.1) should be used in a beforeFilter for the specific methods.
1.2 Sessions allow using CacheEngines to store Sessions, be aware that using memory caching as the only storage of Sessions is not reliable. Further work will be done to allow using the CacheEngines with database Sessions, etc.

git-svn-id: https://svn.cakephp.org/repo/branches/1.2.x.x@5982 3807eeeb-6ff5-0310-8944-8be069107fe0
2007-11-12 01:36:20 +00:00
..
cache updating model Cache engine. 2007-11-09 08:00:59 +00:00
controller Fixes #3507 Session Security.level "high", session destroyed on media 404. 2007-11-12 01:36:20 +00:00
model updating schema generation 2007-11-08 19:06:06 +00:00
view Fixes #3507 Session Security.level "high", session destroyed on media 404. 2007-11-12 01:36:20 +00:00
cache.php Fixes #3507 Session Security.level "high", session destroyed on media 404. 2007-11-12 01:36:20 +00:00
cake_log.php Correcting @return bool 2007-10-22 16:09:35 +00:00
class_registry.php Adding ClassRegistry::flush() to reset the registry 2007-10-22 20:58:55 +00:00
configure.php Changing @return int to @return integer and @param bool to @param boolean 2007-10-22 16:54:36 +00:00
debugger.php updating error handling: messages, templates and css, updating home page messages 2007-11-04 07:03:57 +00:00
error.php updating error handling: messages, templates and css, updating home page messages 2007-11-04 07:03:57 +00:00
file.php adding File::prepare() for fixing line endings 2007-10-25 03:10:31 +00:00
flay.php Changing @return int to @return integer and @param bool to @param boolean 2007-10-22 16:54:36 +00:00
folder.php Changing @return int to @return integer and @param bool to @param boolean 2007-10-22 16:54:36 +00:00
http_socket.php Fixed issue that lead HttpSocket to choke on big files (> 100kb) 2007-11-04 02:29:42 +00:00
i18n.php updating i18n functions, fixes #3451 2007-10-24 01:25:21 +00:00
inflector.php Fixes #3486, Incorrect rule in Inflector::singularize() 2007-11-06 05:12:37 +00:00
l10n.php Correcting @return bool 2007-10-22 16:09:35 +00:00
magic_db.php Updated sample data / sample data extraction routine 2007-10-24 02:59:59 +00:00
object.php Correcting @return int 2007-10-22 16:11:12 +00:00
overloadable.php Correcting all headers in the files 2007-02-02 10:39:45 +00:00
overloadable_php4.php Correcting @return bool 2007-10-22 16:09:35 +00:00
overloadable_php5.php Correcting @return bool 2007-10-22 16:09:35 +00:00
router.php Router::__mapRoute, added check for plugin and controller with the same name 2007-11-07 00:17:38 +00:00
sanitize.php Removing dependency on default database connection from all test cases 2007-11-04 18:05:00 +00:00
security.php Changing @return int to @return integer and @param bool to @param boolean 2007-10-22 16:54:36 +00:00
session.php Fixes #3507 Session Security.level "high", session destroyed on media 404. 2007-11-12 01:36:20 +00:00
set.php Refactoring return of Set::map(); and Set::reverse(); 2007-11-11 23:49:30 +00:00
socket.php Added SSL support for Socket 2007-11-01 21:37:52 +00:00
string.php Correcting @return int 2007-10-22 16:11:12 +00:00
validation.php Fixes #3466, Validation::url() fails for some common urls. Anything without the protocol is not a valid url so part of this ticket is invalid 2007-10-25 03:55:41 +00:00
xml.php Changing @return int to @return integer and @param bool to @param boolean 2007-10-22 16:54:36 +00:00