Re: [fw-general] Zend_Filter_StripTags strips attributes even when told not to

2009-07-15 Thread J DeBord
Thanks for the reply Matthew. I'm using 1.84 Still not working. After executing the code below (see form and controller code) and putting this into the textarea: p This is a onClick=foo.bar() href=http://foo.com/; title=Foo!linked text/a. /p The following is

Re: [fw-general] Zend_Filter_StripTags strips attributes even when told not to

2009-07-15 Thread J DeBord
To add: public function postnewAction() { $request = $this-getRequest(); if(!$request-isPost()) { $this-_helper-redirector('notauthorized', 'error'); } $form = $this-_getNewMessageForm(); if (!$form-isValid($request-getPost())) {

Re: [fw-general] XSS Prevention with Zend Framework

2009-07-15 Thread Carlton Gibson
On 15 Jul 2009, at 03:30, Matthew Weier O'Phinney wrote: 80/20 is a nice rule but not for security. I went through this way few years ago and as you mention it was so convenient to don't care in 80% of cases but the rest was pain in the ass. The setEscape() method doesn't help too much

[fw-general] how to force zend form to submit to new action

2009-07-15 Thread nulele
hello nabble!! I'm trying to integrate my zend application with pommo. I don't want to replicate pommo's logic on new user subscription by creating zend_db objects for every pommo's table... I just want to: 1) create the subscription form with zend_form, 2) validate the form on zend side 3)

Re: [fw-general] Action names

2009-07-15 Thread drm
Muhammad Ali wrote: I have ACL plugin to restrict different controllers and User controller have action called changePasswordAction. I can get to action using /user/change-password/ and it works fine, but before while i am constructing my Acl action name comes as change-password rather

Re: [fw-general] Url helper ignores setParams() - why?

2009-07-15 Thread drm
hussdl wrote: The reasoning behind all this is that I have a search form that uses GET instead of POST to prevent browser warnings about expired post data. So in order to preserve the search criteria when sorting or changing the page I have to convert GET params to ZF params as the url helper

[fw-general] Cookie Usage

2009-07-15 Thread Sergio Rinaudo
Hi, on my project I want to save all the location where the user was ( maybe last 5 locations ) and show to him as a reminder. Then I thought to use the zend_cookie object to store all the visited page ids ( or urls ), my problem is that, after I read the documentation here:

[fw-general] Zend_Form_Element can't assign value via factory / addElements

2009-07-15 Thread Denis Fohl
Hi all, i'm fighting with Zend_Form_Element factory and can't fix the following problem (ZF 1.8.4 patch 1): $fields = array( 'id_ue' = array( 'type'= 'text', 'name'= 'id_ue',

Re: [fw-general] Action names

2009-07-15 Thread Matthew Weier O'Phinney
-- Muhammad Ali imjob@live.com wrote (on Wednesday, 15 July 2009, 02:43 AM +0100): I have ACL plugin to restrict different controllers and User controller have action called changePasswordAction. I can get to action using /user/ change-password/ and it works fine, but before while i am

Re: [fw-general] Zend_Filter_StripTags strips attributes even when told not to

2009-07-15 Thread Matthew Weier O'Phinney
-- J DeBord jasdeb...@gmail.com wrote (on Wednesday, 15 July 2009, 08:13 AM +0200): Thanks for the reply Matthew. I'm using 1.84 Still not working. After executing the code below (see form and controller code) and putting this into the textarea: p            This is a onClick=foo.bar()

Re: [fw-general] XSS Prevention with Zend Framework

2009-07-15 Thread Ondrej Ivanič
Hi On Wed, Jul 15, 2009 at 5:12 PM, Carlton Just an idea/suggestion here, could we have an optional second param to escape() which if provided would override the default (just for that usage)? You need at least two parameters additional for escaping because you have to sometimes specify

Re: [fw-general] XSS Prevention with Zend Framework

2009-07-15 Thread Carlton Gibson
Hi, On 15 Jul 2009, at 13:21, Ondrej Ivanič wrote: On Wed, Jul 15, 2009 at 5:12 PM, Carlton Just an idea/suggestion here, could we have an optional second param to escape() which if provided would override the default (just for that usage)? You need at least two parameters additional for

Re: [fw-general] XSS Prevention with Zend Framework

2009-07-15 Thread Ondrej Ivanič
Hi Why are you mixing them into a single file? Why not have separate files for separate types of code? This simplifies the story for escaping, Sametimes you have to mix everything together because you need dynamically generate values of certain attributes like onXXX, style, ... We can

Re: [fw-general] XSS Prevention with Zend Framework

2009-07-15 Thread Ondrej Ivanič
Hi Why are you mixing them into a single file? Why not have separate files for separate types of code? This simplifies the story for escaping, Sametimes you have to mix everything together because you need dynamically generate values of certain attributes like onXXX, style, ... We can

Re: [fw-general] XSS Prevention with Zend Framework

2009-07-15 Thread Ondrej Ivanič
Hi 2009/7/15 Carlton Gibson carlton.gib...@noumenal.co.uk: Perhaps I'm not fully on board with what you're after but, I imagined all of that to be taken care of by the callback (closure?) passed in as the second parameter. Then, say it's html by default, normally I just do this: Yes, then

[fw-general] Example for calling stored function on ZF1.8

2009-07-15 Thread onewaylife
Hi, I have a stored function which need to be called from module. mine application.ini is some thing like this resources.db.adapter = pdo_mysql resources.db.params.host = localhost resources.db.params.username = root resources.db.params.password = zendframe resources.db.params.dbname =

Re: [fw-general] Zend_Form_Element can't assign value via factory / addElements

2009-07-15 Thread Denis Fohl
Matthew, you pointed it, i was effectively using populate() which reseted the values ! It works now. Thank you. Denis. Matthew Weier O'Phinney a écrit : -- Denis Fohl d.f...@df-info.com wrote (on Wednesday, 15 July 2009, 01:08 PM +0200): i'm fighting with Zend_Form_Element factory and

[fw-general] Zend_Db_Table concrete instantiation

2009-07-15 Thread Ralph Schindler
Hello all! I have commited to trunk a new feature for Zend_Db_Table that will be in ZF 1.9. That feature is the ability to use concrete instantiation on tables. What does that mean? It means this is possible: $authorTable = new Zend_Db_Table('author'); $authors = $authorTable-fetchAll();

Re: [fw-general] Zend_Filter_StripTags strips attributes even when told not to

2009-07-15 Thread J DeBord
Thanks again Matthew. I just downloaded ZF from the trunk and I am 99% sure it is the only copy on the include path. From my bootstrap: define('LIBRARY_PATH', APPLICATION_PATH . '/../library'); define('APPLICATION_ENVIRONMENT', 'development'); set_include_path(LIBRARY_PATH); In fact the

Re: [fw-general] Cookie Usage

2009-07-15 Thread Саша Стаменковић
Why not use session instead? Regards, Saša Stamenković On Wed, Jul 15, 2009 at 12:36 PM, Sergio Rinaudo kaiohken1...@hotmail.comwrote: Hi, on my project I want to save all the location where the user was ( maybe last 5 locations ) and show to him as a reminder. Then I thought to use the

FW: [fw-general] Cookie Usage

2009-07-15 Thread Sergio Rinaudo
Hi, I would like that when the user close the browser, reopen it, and comes to the website again, he can see this remainder, also if he is not logged or registered. S. Date: Wed, 15 Jul 2009 16:52:22 +0200 From: umpir...@gmail.com To: kaiohken1...@hotmail.com CC:

[fw-general] SubForms | MultiPage Forms | Validation

2009-07-15 Thread Shaun Farrell
Question about multi page forms using subforms. Ok so I have been looking at the example on http://framework.zend.com/manual/en/zend.form.advanced.html#zend.form.advanced.multiPage http://framework.zend.com/manual/en/zend.form.advanced.html#zend.form.advanced.multiPage%20which is all good.

Re: FW: [fw-general] Cookie Usage

2009-07-15 Thread Саша Стаменковић
Didn't use cookies in zf, but I know they are used in Zend_Http_Client, so you can check the source ;) Regards, Saša Stamenković 2009/7/15 Sergio Rinaudo kaiohken1...@hotmail.com Hi, I would like that when the user close the browser, reopen it, and comes to the website again, he can see

Re: [fw-general] How to dispatch a 404 error

2009-07-15 Thread Henrique Moody
I think you can use throw new Zend_Controller_Dispatcher_Exception('Your message here'); gllop wrote: I'm trying to thow a Zend_Controller_Action_Exception to dispatch a 404 page error. The ErrorController and the Plugin_Handler instance are already implemented but I don't know how can i

Re: [fw-general] how to force zend form to submit to new action

2009-07-15 Thread Eugene Morgan
If I understand correctly what you are trying to do, I think all you need to do is immediately after you instantiate the $newsletterForm, set its action to what you want (not after it's posted) ... i.e., $newsletterForm = new Default_Model_NewsletterForm();

[fw-general] Route Rewrite not working...

2009-07-15 Thread kusum
Dear All, I am new to zend framework got stuck in a problem... i have some navigation links on my main page... My url goes like http://localhost:8001/photoshop/public/ and on my page i have link as li article/success/sss navigation /li here article is my controller,success is action

[fw-general] Confusion about open source licensing

2009-07-15 Thread Muhammad Ali
Hi Question: If i were to release an opensource project under GPL, but which uses Zend Framework (released under BSD license), am I not allowed to do so? OR my sourcecode should not contain Zend Framework and be downloaded separately, just because these licenses are not compatible. Your

[fw-general] Confusion about open source licensing

2009-07-15 Thread Muhammad Ali
Hi Question: If i were to release an opensource project under GPL, but which uses Zend Framework (released under BSD license), am I not allowed to do so? OR my sourcecode should not contain Zend Framework and be downloaded separately, just because these licenses are not compatible. Your

Re: [fw-general] Confusion about open source licensing

2009-07-15 Thread Tobias Gies
Hi Muhammad, ZF is released under the New BSD Licensehttp://framework.zend.com/license/new-bsd. Yes, you can use it in and ship it with a GPL project. Best regards, Tobias 2009/7/15 Muhammad Ali imjob@live.com: Hi Question: If i were to release an opensource project under GPL, but

[fw-general] Re: [fw-db] Zend_Db_Table concrete instantiation

2009-07-15 Thread Mon Zafra
That's neat. I've always wondered why Zend_Db_Table is an abstract class extending another abstract class while not adding any new methods. -- Mon On Wed, Jul 15, 2009 at 9:49 PM, Ralph Schindler ralph.schind...@zend.comwrote: Hello all! I have commited to trunk a new feature for

[fw-general] Inserting Zend_Form_Elements into a Zend_Form

2009-07-15 Thread Mary Nicole Hicks
I am finding the Zend_Form hard to use. Currently all form elements usable in a Zend_Form have order property that specify an integer. This number is used to sort the form elements. The problem I have is that I have extended the implementation of a form several times. In an extending class, I