Quick question about ensuring functions can not be run from the URL. Would
this be the correct setup?
controller;
$key = $this->Model->__someFunction($key);
model:
function __someFunction($key)
{
.......
return $something;
}
If so basically anything double underscored is for cakes internal process?
But my question comes from ACL where you define what actions a user has
access to if
function userIsAllowedThis ($id) {
and
$key = $this->Model->__someFunction($key);
is in the allowed function does that still work if the user has access to
the initial function?
}
Dave
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"CakePHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---