Log message #4102895

# At Username Text
# Dec 12th 2017, 15:48 V99 the correct function
# Dec 12th 2017, 15:48 V99 im reading the documentation but i cant see
# Dec 12th 2017, 15:48 V99 i have a webpage develop in cakephp and now i have to make an application to change users passwords, this app is being developed under vb net (requirement of the client), i read the mysql database user structure but i cant generate the hash, how cakephp generate those hash?
# Dec 12th 2017, 15:43 V99 hi
# Dec 12th 2017, 15:43 flavius in php.ini
# Dec 12th 2017, 15:43 flavius ```[Date] date.timezone=Europe/Bucharest```
# Dec 12th 2017, 15:42 hmic does not neccessarily need to be correct :P
# Dec 12th 2017, 15:42 hmic show your php setting though :D
# Dec 12th 2017, 15:42 flavius so its 0 now
# Dec 12th 2017, 15:41 flavius DST+1 ended on 287 oct
# Dec 12th 2017, 15:41 hmic *fg*
# Dec 12th 2017, 15:41 dereuromark gmt+2 with or without DST+1?
# Dec 12th 2017, 15:40 flavius it should still say 2017, yet it doesnt
# Dec 12th 2017, 15:40 flavius im gmt+2 btw, so it should be 23:59:59.... 1 second away from 2018
# Dec 12th 2017, 15:40 dereuromark seems like php doesnt
# Dec 12th 2017, 15:39 flavius i18nFormat ignores the timezone?
# Dec 12th 2017, 15:39 dereuromark then it should stay :slightly_smiling_face:
# Dec 12th 2017, 15:39 flavius well lets say im in UTC
# Dec 12th 2017, 15:39 dereuromark why? if you are in gmt+ this is expected for utc datetime
# Dec 12th 2017, 15:38 flavius `$time->i18nFormat('YYYY')` outputs 2018 instead of 2017
# Dec 12th 2017, 15:38 flavius ```Cake\I18n\Time {#163 +"time": "2017-12-31T21:59:59+00:00" +"timezone": "UTC" +"fixedNowTime": false }```
# Dec 12th 2017, 15:38 flavius this is so strange
# Dec 12th 2017, 14:47 rafael.junqueira.sant Thank you, @admad
# Dec 12th 2017, 14:47 dereuromark isnt that were the ide helper would come in? :slightly_smiling_face:
# Dec 12th 2017, 14:46 neon1024 PHPStan is upset that I’ve not declared class properties in my controller for all the table classes I load
# Dec 12th 2017, 14:46 admad this way all your code files go 1 level above public_html and are safe
# Dec 12th 2017, 14:46 admad to mitigate the issue rename your app's "webroot" to "public_html" and then update the WWW_ROOT constant here https://github.com/cakephp/app/blob/master/config/paths.php#L52
# Dec 12th 2017, 14:44 admad @rafael.junqueira.sant theoretically yes, if your URL rewriting gets borked and php file could be directly executed
# Dec 12th 2017, 14:43 rafael.junqueira.sant Greetings. In shared hosting, is it a considerable flaw to put all cakephp files in public_html? Can it be exploited?
# Dec 12th 2017, 14:41 admad that automatically gonna happen if they are taken out of webroot :slightly_smiling_face:
# Dec 12th 2017, 14:40 neon1024 ..and ensure that your web server is passing file requests to PHP
# Dec 12th 2017, 14:39 hughbertd Cool, I’ll give that a look, thanks @admad
# Dec 12th 2017, 14:39 admad You can then check how the `AssetMiddleware` serves files for example.
# Dec 12th 2017, 14:38 admad @hughbertd if you want to control access to some files then first thing to do is move them out of webroot.
# Dec 12th 2017, 14:34 hughbertd Hi all Is there a way of using Cake3's middleware to control access to folders files within the webroot?
# Dec 12th 2017, 14:20 hmic then display it
# Dec 12th 2017, 14:20 hmic yes
# Dec 12th 2017, 14:16 obinoob hmic: so I need to contain the data which I'm doing at line https://gist.github.com/obinoob/ceffa14821e7c353f6216fd9b3043539#file-clientscontroller-php-L232
# Dec 12th 2017, 14:15 hmic - which you should *not* do on bulk operations, like an index, but contain the data upfront of course
# Dec 12th 2017, 14:14 hmic you could implement a lazyloader in the entity class to load the entity and display field on access
# Dec 12th 2017, 14:14 hmic as the data is not stored in the table you are querying