# |
Aug 9th 2008, 07:57 |
NetersLandreau |
TheBig: initial research proves lqdice__ is correct.. do not trust referring page as reported by apache |
# |
Aug 9th 2008, 07:57 |
kamalcom |
Hi francky06l |
# |
Aug 9th 2008, 07:57 |
TheBig |
I've a registration page, after that you can invite people... Would like to prevent people using that page for spamming |
# |
Aug 9th 2008, 07:56 |
francky06l |
Hi bakers |
# |
Aug 9th 2008, 07:56 |
TheBig |
NetersLandreau, yes, is that what i'd like |
# |
Aug 9th 2008, 07:54 |
Anon323 |
I have a form, one input. Saving to database works. Now I want to save the datetime in the database, but not having an datetime input field. how can I manipulate $this->data to add the datetime? |
# |
Aug 9th 2008, 07:54 |
NetersLandreau |
hmm.. i guess i need to do some research on how apache sets the refering page.. i didn't realize you could fake it |
# |
Aug 9th 2008, 07:52 |
cl0s_ |
yes true |
# |
Aug 9th 2008, 07:52 |
lqdice__ |
otherwise they can go page1.. some other page.. page2 and it still works |
# |
Aug 9th 2008, 07:51 |
lqdice__ |
but to guarantee they are coming from page1 you also need to unset the key if they go anywhere else |
# |
Aug 9th 2008, 07:51 |
cl0s_ |
page1 - set the session... page2- check for the session if not there redirect to page 1 else execute code, delete the session.. |
# |
Aug 9th 2008, 07:51 |
lqdice__ |
there is very little you can do to guarantee that one page was sent from another.. what are you trying to do exactly? |
# |
Aug 9th 2008, 07:49 |
cl0s_ |
yea i think a session would work best there.. but again thats not gauranteed.. |
# |
Aug 9th 2008, 07:49 |
lqdice__ |
its not guaranteed.. its sent by the user.. they can fake it and some browsers dont require sending it |
# |
Aug 9th 2008, 07:48 |
lqdice__ |
refererr should not be used like that |
# |
Aug 9th 2008, 07:48 |
NetersLandreau |
TheBig: check the referrer and only allow certain ones? |
# |
Aug 9th 2008, 07:47 |
lqdice__ |
TheBig: its hard to guarantee that |
# |
Aug 9th 2008, 07:47 |
TheBig |
btw, can I restrict the access to a page only if reached by an other page? |
# |
Aug 9th 2008, 07:47 |
lqdice__ |
good morning :) |
# |
Aug 9th 2008, 07:46 |
TheBig |
zeen. I was in doubt what I was able to use session only when logged, but simply I was storing empty data... :( me idiot :) |
# |
Aug 9th 2008, 07:26 |
zeen |
punish me if i'm doing bad :) |
# |
Aug 9th 2008, 07:25 |
zeen |
should be in there about sessions |
# |
Aug 9th 2008, 07:23 |
TheBig |
like writing them in sessios, for example... |
# |
Aug 9th 2008, 07:23 |
TheBig |
not using post or get |
# |
Aug 9th 2008, 07:22 |
TheBig |
how can I pass arguments form a page to another? |
# |
Aug 9th 2008, 06:48 |
zeen |
guess i can just add something to libs |
# |
Aug 9th 2008, 06:42 |
zeen |
without screwing around with the originals |
# |
Aug 9th 2008, 06:42 |
zeen |
is it possible i can code my own cake bake scripts? |
# |
Aug 9th 2008, 06:41 |
golak |
thanks Mickey689 |
# |
Aug 9th 2008, 06:41 |
golak |
got it |
# |
Aug 9th 2008, 06:41 |
golak |
should i set it in the controller or inside the model |
# |
Aug 9th 2008, 06:37 |
Mickey689 |
golak: you can set it beforehand, $this->Model->recursive = -1 for example |
# |
Aug 9th 2008, 06:35 |
golak |
How can i specify the recursive value for Model->findby<fieldname>() ??? |
# |
Aug 9th 2008, 06:28 |
Mickey689 |
thanks :) |
# |
Aug 9th 2008, 06:28 |
jan_cr |
Is there any Translate behavior tutorial on the internet? There is empty section in the book covering this topic and I am unable to google anything |
# |
Aug 9th 2008, 06:28 |
skua |
try |
# |
Aug 9th 2008, 06:28 |
skua |
it will show a debug to 0 |
# |
Aug 9th 2008, 06:28 |
skua |
then when it arrive to your specific action |
# |
Aug 9th 2008, 06:28 |
skua |
it's will set debug to 2 |
# |
Aug 9th 2008, 06:27 |
skua |
no cause cakephp read your core.php |
# |
Aug 9th 2008, 06:27 |
Mickey689 |
skua, thanks, but will it affect the whole site though? |