Monday, November 30, 2009

Re: Social Portal Demo developed in Cakephp

I try to learn and to use cakephp in the right way. This is just a
base general code and I am trying to improve it. Especially I am
interested in the vulnerable side and ways to fix this. Thanks for
feedback and suggestions. :)

On 30 Nov., 11:48, "j0n4s.h4rtm...@googlemail.com"
<j0n4s.h4rtm...@googlemail.com> wrote:
> Hello,
>
> my suggestions are:
> - clean your code from outcommented waste/old stuff (its just much)
> - use cake's ORM instad of query()
> - use cake errors or session->setFlash instead of render('errors/
> blah')
> - docblocks make no sense if you do not describe the usage of the
> method or the meaning of the parameters
> - your application is probably highly vulnerable: a.) no usage of ORM
> at some places, direct insertion of ID into query, no idea if it gets
> escaped (try model->escapeField(), if you really want to stick with
> query()) b.) no use of securitycomponent, did not notice anything
> equal
>
> On Nov 30, 12:07 am, crisuwork <maran.e...@gmail.com> wrote:
>
> > A Social Portal Demo developed in Cakephp giving You possibility to
> > save your favorite music songs from Youtube by categories. Cakephp
> > core version used is 1.2x. The purpose of this application is teaching
> > and understand how Cakephp it works. Available options: Register,
> > Login, Profile Modify, Add song by Category.
>
> > Demo:http://eopp.de
> > Download source fromhttp://code.google.com/p/marancakemelody/
>
> > Any suggestions are welcome.

Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions.

You received this message because you are subscribed to the Google Groups "CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en

No comments: