Hi ski.
> OK, I currently have this in the relevant controller method:
>
> if ($this->Session->read('user_id') == NULL) $this->redirect('/');
>
> The problem here is if they have already created a session (in the
> manner I want them too), the required values are stored there and so
> they can then get a direct hit on these views.
In a similar situation I also store the name, or sequence number of the
"current" view in the session. Then when a request is made I check
against it to see if the user is allowed to move to the requested view.
Using a Post/Redirect/Get design pattern also makes this easier to manage.
Regards,
Langdon
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake
PHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---