to the author of the article, i've been trying to get a comment on
your article, but i think there's something wrong with bakery's
comment system, so i'll just post it here:

1) There is a typo:
First thing you may have noticed is the function beforeFilter(), when
present this function is called before each controller action. So
we'll use it to call our function __validateLogin() to ensure that an
individual is properly logged in.

should be __validateLoginStatus() instead of __validateLogin()

2) I see some security issues with your code (eg password and username
are transmitted in cleartext, your code is prone to brute-force
attacks,...), but then again, you mentioned this is aimed to give a
basic understanding.  Besides the "simple user authentication" on the
cake manual has these same issues, but it is also meant to give some
understanding, not for real-world apps, so i'm not complaining.  I
just want to make it clear to end confusion.

3) Learn the difference between authentication and access control.
groups, permissions,.. don't have anything to do with authentication.

hope i could help..

Dieter


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to