Hi ski.

> OK, I currently have this in the relevant controller method:
> 
> if ($this->Session->read('user_id') == NULL) $this->redirect('/');
> 
> The problem here is if they have already created a session (in the
> manner I want them too), the required values are stored there and so
> they can then get a direct hit on these views.

In a similar situation I also store the name, or sequence number of the 
"current" view in the session.  Then when a request is made I check 
against it to see if the user is allowed to move to the requested view.

Using a Post/Redirect/Get design pattern also makes this easier to manage.

Regards,
Langdon

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to