Whether I use:
$_SESSION['captcha']
or
$this->Session->read('captcha')
this does not make a difference in the behavior.
The security level was already set to low.
To me this definitely looks like a bug in RC1.
On Jun 8, 6:27 pm, "b logica" <[EMAIL PROTECTED]> wrote:
> On Sun, Jun 8, 2008 at 4:34 AM,Mike52<[EMAIL PROTECTED]> wrote:
>
> > I noticed this problem after upgrading from 1.2.0.6311 beta to
> > 1.2.0.7125 RC1
>
> > My captcha check did not work after upgrading.
> > I am using this captchahttp://captcha.ru/en/kcaptcha/in the vendors
> > directory.
> > The render method for the image does this:
> > $this->controller->Session->write('captcha', $kcaptcha-
> >>getKeyString());
>
> > In the controller action (user registration) the value entered by the
> > user is checked against the value in the session:
> > if ($this->data['User']['captchaCode'] != $_SESSION['captcha']) {
>
> > In the beta version of CakePHP, this works fine.
>
> > In the RC version, $_SESSION['captcha'] is not set.
>
> > This is a clear and reproducable difference between the 2 Cakephp
> > versions.
> > Any suggestions where to look next?
>
> $this->controller->Session != $_SESSION
>
> Also, if Security.level set to 'high' you might want to bring it down
> a notch. That's known to cause this sort of problem, as well.
>
> Configure::write('Security.level', 'medium');
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"CakePHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---
