Log message #4225693

# At Username Text
# Feb 9th 2020, 09:44 challgren In your permissions return add
# Feb 9th 2020, 09:44 challgren You gotta add a bnypass for it
# Feb 9th 2020, 09:40 rudy1976s I am trying to install CakeDC Users plugin but it has infinite request loading on login page when debuk it is forced to display
# Feb 9th 2020, 09:40 rudy1976s good morning!
# Feb 9th 2020, 01:06 lpj145 :)
# Feb 9th 2020, 01:06 ndm if you're talking about the data that you're passing, then the fields might be safe of course if you've filtered them, I'm purely referring to how that method treats input
# Feb 9th 2020, 01:04 lpj145 i need this approach on some cake projects...
# Feb 9th 2020, 01:04 lpj145 ExpressRequest plugins intent to safe and filter query parameters...
# Feb 9th 2020, 01:02 ndm but not always :)
# Feb 9th 2020, 01:02 ndm the other way around ;)
# Feb 9th 2020, 01:02 lpj145 @ndm thanks, always fields is safe, only values is not safe...
# Feb 9th 2020, 01:02 lpj145 hahaha, me too, but, some issues on cake about sql inject, point to query expression safe to execute this operations types....
# Feb 9th 2020, 01:01 ndm You can pass unsafe data to the `value` argument, but not to the `field` argument. There's also a third argument if you want to control which type is being used for binding (the default is string)
# Feb 9th 2020, 01:01 mrfeedback in doubt always filter i would say :)
# Feb 9th 2020, 00:53 lpj145 i can pass unsafe data to this, or need filter ?
# Feb 9th 2020, 00:52 slackebot <lpj145>
# Feb 9th 2020, 00:51 lpj145 anybody know if query expression is secure ?
# Feb 8th 2020, 23:54 ndm @luizcmarin Here's a few variants: https://stackoverflow.com/questions/26430259/cakephp-3-0-between-find-condition/26463384#26463384
# Feb 8th 2020, 23:38 luizcmarin i'm researching but i haven't found it yet
# Feb 8th 2020, 23:37 luizcmarin please what is the correct syntax for the current date between two dates return $ this-> find () -> where *([now () between 'date_begin, date_end']*);
# Feb 8th 2020, 21:27 mrfeedback i want the results to be part of the resultset like when i use contain
# Feb 8th 2020, 21:27 ndm @hi You are missing the return type declaration that's show in the error message. However you shouldn't use the blog tutorial, it's outdated and has been removed from the docs TOC for a reason. Do the CMS tutorial instead.
# Feb 8th 2020, 21:26 mrfeedback when using `matching`
# Feb 8th 2020, 21:22 hi https://i.imgur.com/fvkHi3O.png
# Feb 8th 2020, 21:20 hi i have a problem with cake - Blog Tutorial - Authentication and Authorization
# Feb 8th 2020, 21:20 hi hi
# Feb 8th 2020, 15:33 rudy1976s good afternoon! I am trying to instal latest release of CakeDC Users plugin but I am finding problems extending controller to be able to load my custom layout for displaying login page. Do the doc is updated ? Anyone here installed it ?
# Feb 8th 2020, 15:05 lpj145 Yours have milestones to some cake libraries what the interested people can be help ?
# Feb 8th 2020, 15:04 lpj145 What you think about validations message ? Laravel implement some messages to validation, you think about add default locale based messages ?
# Feb 8th 2020, 15:01 lpj145 @savant is a good empty anwser, but, keep going, some peoples can reflect about assunpt.
# Feb 8th 2020, 13:04 jan-willem Exactly.
# Feb 8th 2020, 13:02 dsar Laravel has some nicer syntax in some places, but I find CakePHP generally better
# Feb 8th 2020, 12:59 jan-willem For work I'm working now for half a year in Laravel. So far, not really convinced Laravel is better then CakePHP. Both have their cons and pros
# Feb 8th 2020, 12:56 dsar Nice ;)
# Feb 8th 2020, 12:56 jan-willem Working on a new side-project to keep track of the scores of a card-game 8)
# Feb 8th 2020, 12:55 dsar Ok then
# Feb 8th 2020, 12:55 dsar This is available since 3.3
# Feb 8th 2020, 12:55 jan-willem 4.03
# Feb 8th 2020, 12:55 dsar What version of CakePHP do you have?
# Feb 8th 2020, 12:55 jan-willem A, perfect. Missed that one indeed.
# Feb 8th 2020, 12:52 dsar https://book.cakephp.org/4/en/orm/validation.html#association-count-rules