I was just reading a post online about user registration and was curious
about this bit 
 
function register() {
        if (!empty($this->data)) {
                $clean = new Sanitize();
                $clean->clean($this->data);
                $this->User->set($this->data);

Might be dumb of me but if a users enters a character that's going to get
cleaned (removed) they will not even know it's gone. Try to login and the
password will not work because they will be typing in what they think is the
right password before it was cleaned.

Am I wrong?

Is this the right way or whats the best way to securly check the password?

Thanks,

 
Dave


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to