Friday, December 7, 2012

Security component and data posted from external site

I'm using 2.3 beta and the Security component.

I have a site that is posting data to a controller action but the Security component blocks the request; so I don't get $this->request->data and the code fails.

If I disable the Security component in beforeFilter for this action the data gets through OK. The next screen the user sees is a log in screen, but as the Security component was disabled when it was created it doesn't contain the _tokens so the subsequent log in fails ($this->request->is('post') returns false).

I have tried $this->Security->unlockedActions = array('action_name'); but that seems to have no effect (it's as if Security component is still active).

Anyone got any clues or advice please?

--
Like Us on FaceBook https://www.facebook.com/CakePHP
Find us on Twitter http://twitter.com/CakePHP
 
---
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com.
To unsubscribe from this group, send email to cake-php+unsubscribe@googlegroups.com.
Visit this group at http://groups.google.com/group/cake-php?hl=en.
 
 

No comments: