So it seems I got a stupid question. Sorry folks sometimes I just cant see 
the sutff Im looking for.

Just read the new Auth doc carefully. I realized that theres authenticate 
and authorize configs but I did not realize why it is ok to authenticate 
when a user submitts a blank login form or whatever else. I pass empty 
values or values of a user that doesnt exist on the model and it still 
passes authentication .. why? It doesnt sound weird?

I get it that this works fine $this->Auth->login(). But I really don't get 
it why $this->Auth->login("whatever shit is submitted passes 
authentication") always return true. If there is any clear explanation 
about that on the docs I'm sorry I just miss it.

Should be looking into the core class to study it and try to understand it 
better when I get a break.




-- 
Our newest site for the community: CakePHP Video Tutorials 
http://tv.cakephp.org 
Check out the new CakePHP Questions site http://ask.cakephp.org and help others 
with their CakePHP related questions.


To unsubscribe from this group, send email to
[email protected] For more options, visit this group at 
http://groups.google.com/group/cake-php

Reply via email to