I agree with aaron.
Security is never too much.

I never tought about this issue. Its not a real issue, but think a
little further, if one day they discover a bug in cakephp core that
let you execute sql querys.
This could be a problem, since the table names and fields are
avaliable on source code.
Sure if the hacker just want to crash your system, he will not worry
about this informations, but if some user want to have a premium
account on your service, he could create an user and you will never
know, or stole someones user, i dont know.

Its a minor issue, but still an issue.



On Tuesday, March 15, 2011, arron <[email protected]> wrote:
> its not my only form of security i just wanted another layer to make
> it harder for anyone to hack it.
> whats wrong with making it harder for someone to know what your
> database tables are? how can you hide them? is there a better way?
>
>
>
> On Mar 14, 5:15 pm, arron <[email protected]> wrote:
>> I want to hide my database fields and make it harder for people trying
>> to spam me  or hack it
>>
>> On Mar 14, 5:08 pm, euromark <[email protected]> wrote:
>>
>> > the question is
>> > what do you want to achieve with this? other than making your life a
>> > hell of a lot more difficult as a developer
>>
>> > On 14 Mrz., 23:45, arron <[email protected]> wrote:
>>
>> > > I have a form
>>
>> > >                  <?= $form->create(info );?>
>> > >                 <?= $form->input('FirstOwner.fname');?>
>> > >                 <?= $form->input('FirstOwner.lname');?>
>> > >                 <?= $form->input('FirstOwner.first_owner_title');?>
>> > >                 <?= $form->input('FirstOwner.first_owner_precentage');?>
>> > >                 <?= $form->input('FirstOwner.first_home_address');?>
>> > >                 <?= $form->input('FirstOwner.first_owner_city');?>
>> > >                 <?= $form->input('FirstOwner.first_owner_state');?>
>> > >                 <?= $form->input('FirstOwner.first_owner_zip');?>
>> > >    <?= $form->end(); ?>
>>
>> > > The html output is
>>
>> > > <div class="input text"><label for="FirstOwnerFname">Fname</
>> > > label><input name="data[FirstOwner][fname]" type="text"
>> > > maxlength="255" value="" id="FirstOwnerFname" /></div>           <div
>> > > class="input text"><label for="FirstOwnerLname">Lname</label><input
>> > > name="data[FirstOwner][lname]" type="text" maxlength="255" value=""
>> > > id="FirstOwnerLname" /></div>
>>
>> > > how can iobfuscate/hash the id name and id?
>>
>> > > I want it to produces something like
>>
>> > > <div class="input text"><label for="FirstOwnerFname">Fname</
>> > > label><input name="5sdf65sf6g56asdf56as" type="text" maxlength="255"
>> > > value="" id="asd45a5sd4a5sd45ad" /
>>
>>
>
> --
> Our newest site for the community: CakePHP Video Tutorials 
> http://tv.cakephp.org
> Check out the new CakePHP Questions site http://ask.cakephp.org and help 
> others with their CakePHP related questions.
>
>
> To unsubscribe from this group, send email to
> [email protected] For more options, visit this group at 
> http://groups.google.com/group/cake-php
>

-- 

--
Renato de Freitas Freire
[email protected]

-- 
Our newest site for the community: CakePHP Video Tutorials 
http://tv.cakephp.org 
Check out the new CakePHP Questions site http://ask.cakephp.org and help others 
with their CakePHP related questions.


To unsubscribe from this group, send email to
[email protected] For more options, visit this group at 
http://groups.google.com/group/cake-php

Reply via email to