Re: Security Notice for 1.2.0.7962, Using AuthComponent without SecurityComponent

hi gwoo i want to give you a email,but i don't know your email,so i
have a problem
about 1.20 bug

i write this in postcontroller ajax is well,but write this in
appcontroller is wrong,about ajax.
my website:www.zhuyinghao.com

var $helpers = array('Html', 'Form', 'Javascript', 'Ajax');

On 1月17日, 上午6时14分, Gwoo <gwoo.cake...@gmail.com> wrote:
> After the release of 1.2 Final, we received a lot of attention. Some
> of this came in the form of a security concern. The issue could affect
> sites relying on the AuthComponent for user authentication, without
> the use of the SecurityComponent. Essentially, an attacker may be able
> to obtain credentials as the first user of the system. If you are
> interested in testing your site, you can use the SQL Inject Me plugin
> for Firefox[1]
>
> Along with several other bugs, this issue was fixed in the recently
> released CakePHP 1.2.1.8004 Stable. We highly recommend that users
> upgrade to this release.
>
> A big thank you for all those who report these issues to us and allow
> us to fix them.
>
> Bake on,
> CakePHP team
>
> [1]https://addons.mozilla.org/en-US/firefox/addon/7597

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to cake-php+unsubscribe@googlegroups.com
For more options, visit this group at http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---