Log message #113477

# At Username Text
# Aug 9th 2008, 11:11 AD7six and don't try and implement security with validation rules
# Aug 9th 2008, 11:10 AD7six Anon323: see the whitelist in the save param, save only saves data on that object, not related objects and see the security component
# Aug 9th 2008, 11:09 M4ngoB00M hello
# Aug 9th 2008, 10:49 freebox cool
# Aug 9th 2008, 10:49 freebox uhm
# Aug 9th 2008, 10:48 kalileo freebox: assuming you have an association set up between them in the Models
# Aug 9th 2008, 10:47 kalileo freebox: $data = $this->Category->Product->find...
# Aug 9th 2008, 10:46 freebox what i need to do?
# Aug 9th 2008, 10:45 freebox I need to access products from categories controller
# Aug 9th 2008, 10:45 labanux /j #codeigniter
# Aug 9th 2008, 10:38 medice I AM CAPTAIN PLANET
# Aug 9th 2008, 10:27 B00mgo_M4N YES THIS EARTH
# Aug 9th 2008, 10:21 kalileo I asked which earth?
# Aug 9th 2008, 10:20 B00mgo_M4N i AM cakephp
# Aug 9th 2008, 10:19 B00mgo_M4N yes!
# Aug 9th 2008, 10:17 kalileo which earth?
# Aug 9th 2008, 10:16 B00mgo_M4N i am the best cakephp guy on earth!
# Aug 9th 2008, 10:16 B00mgo_M4N hello
# Aug 9th 2008, 10:06 kalileo lol
# Aug 9th 2008, 10:05 Anon323 err ... good idea. i was so fixated on validation rules.
# Aug 9th 2008, 10:04 kalileo Anon323: how about a simple "if (!empty($yourfield)) go bananas;" in your controller before saving
# Aug 9th 2008, 10:02 kalileo *field
# Aug 9th 2008, 10:02 kalileo Anon323: if you put such a validation in your model validations it might stop you from ever entering data in that filed ;)
# Aug 9th 2008, 10:00 Anon323 is it maxLength 0?
# Aug 9th 2008, 10:00 Anon323 allowEmpty => true means the input can also be not-empty.
# Aug 9th 2008, 10:00 Anon323 required => false means the input is optional (will be accepted if exists).
# Aug 9th 2008, 10:00 Anon323 what is the rule to dismiss an input completely?
# Aug 9th 2008, 09:55 kalileo Anon323: and if you have sensitive data there consider to only allow authenticated users to submit data
# Aug 9th 2008, 09:54 kalileo Anon323: it's a good idea to do that
# Aug 9th 2008, 09:50 minicaker ¿?
# Aug 9th 2008, 09:49 Anon323 so if I have 3 fields and my form only needs 2 and the attacker knows about the 3rd field and he manually adds it to the form cake will save it too? so i need to set up validation rules for all fields -- even if not used in a form?
# Aug 9th 2008, 09:48 minicaker (sorry for my English)
# Aug 9th 2008, 09:48 minicaker the "CRUD" views created for scaffolding... are they created in the app/views folder?
# Aug 9th 2008, 09:48 minicaker ok
# Aug 9th 2008, 09:47 minicaker a little question (sorry)
# Aug 9th 2008, 09:47 Anon323 just ask ...
# Aug 9th 2008, 09:47 minicaker Hello, could someone answer a little problem? (about scaffolding)
# Aug 9th 2008, 09:43 minicaker hiç
# Aug 9th 2008, 09:43 minicaker hola
# Aug 9th 2008, 09:39 kalileo Cake will see the fields submitted and save them
# Aug 9th 2008, 09:39 kalileo Anon323: just name it correctly and submit and then in your receiving controller method do your Model->save