Re: [fw-general] Zend guru advise on how to build a secure function - could we make a proposal out of this ?

2011-03-03 Thread Markizano Draconus
Hey Zladivliba, Here's my point : if you only autohrize "abcdefghijklmnopqrsquvwxyz" + '0123456789' + ".,;:()/[] ' I'm pretty sure there's no way to make an attack, xss or sql injection. - You can't make a sql injection because you need "\" to do this and if you escape all user input (" and ')

Re: [fw-general] Re: Setting a custom route seems to break zend_navigation URLs

2011-03-03 Thread Hector Virgen
On Thu, Mar 3, 2011 at 1:57 PM, Peter Sharp wrote: > I guess what I find confusing in this is that the route 'default' is not > used as the default. You see the word default and you expect that if > nothing is specified, then the default value should be used. I totally agree with your stateme

[fw-general] Re: Setting a custom route seems to break zend_navigation URLs

2011-03-03 Thread Peter Sharp
Hector Virgen wrote: > > In your navigation configuration you need to specify which route to use > for > each page -- it won't default to the "default" route. Without specifying a > route it's like calling the Url view helper and passing in NULL as the > route > (which ends up using the currently

[fw-general] Zend Framework 1.11.4 Released

2011-03-03 Thread Matthew Weier O'Phinney
The Zend Framework team announces the immediate availability of Zend Framework 1.11.4, our fourth maintenance release in the 1.11 series. This release includes almost 40 bug fixes. You may download ZF 1.11.4 from the Zend Framework site: * http://framework.zend.com/download/latest For a full li

Re: [fw-general] Re: Catching ALL Exceptions

2011-03-03 Thread Hector Virgen
> > $front->registerPlugin(new MB_Plugins_Exceptions()); You shouldn't have to manually register the error handler plugin -- the front controller will do this automatically unless you called $front->throwExceptions(true). That call will internally disable the error handler plugin. I think what i

Re: [fw-general] Re: Setting a custom route seems to break zend_navigation URLs

2011-03-03 Thread Hector Virgen
In your navigation configuration you need to specify which route to use for each page -- it won't default to the "default" route. Without specifying a route it's like calling the Url view helper and passing in NULL as the route (which ends up using the currently matched route). -- *Hector Virgen*

Re: [fw-general] Zend_Date Behavior: PEBKAC or Bug?

2011-03-03 Thread Ryan Lange
On Wed, Mar 2, 2011 at 10:56 PM, Simon Walter wrote: > On Thursday, March 03, 2011, Ryan Lange wrote: > > ["date_format"] => string(5) "d.M.y" > > I may be very very wrong about this, but wouldn't that be allowing a single > digit for for any of the date parts? > > Here is what I read: > M

Re: [fw-general] Re: Zend_Date Behavior: PEBKAC or Bug?

2011-03-03 Thread Ryan Lange
On Thu, Mar 3, 2011 at 1:57 AM, David Muir wrote: > Zend_Date is next to useless for validating dates: > http://framework.zend.com/issues/browse/ZF-7583 > Well, that confirms that. Thanks. > You're better off building your own date validator. > Everything seems to work as expected as long as y

[fw-general] how to be sure a patch is fixed in trunk too ?

2011-03-03 Thread Julian
Hello Fw-general, I have 2 patches submited by my fellow colleagues. And we are very interested to see both patch submited to trunk , and ready for 1.11.4 future release As at this time, WURLF integration in ZF is quite broken No idea how to submit a patch to trunk. thank you for an

Re: [fw-general] Zend_Cache cleaning specified tag

2011-03-03 Thread holografix .
Hi Tags are not supported for the APC backend. See here: http://framework.zend.com/manual/en/zend.cache.backends.html Best regards holo 2011/3/3 Vincio > Hi, > I'm going crazy trying to delete a specified tag. > > I'm doing something like this: > > $frontendOptions = array('automatic_serial

[fw-general] Re: Zend Acl constructor

2011-03-03 Thread benoit
Thanks for your reply ! And this is the same reason that why plugin can't be configure through configuration file ? -- View this message in context: http://zend-framework-community.634137.n4.nabble.com/Zend-Acl-constructor-tp138p493.html Sent from the Zend Framework mailing list archive

[fw-general] Zend_Cache cleaning specified tag

2011-03-03 Thread Vincio
Hi, I'm going crazy trying to delete a specified tag. I'm doing something like this: $frontendOptions = array('automatic_serialization' => true); $backendOptions = array(); $tag = 'myTag'; $cache = Zend_Cache::factory('Core', 'APC', $frontendOptions, $backendOptions); $cache->save($myData, $tag);

[fw-general] Re: Zend_Date Behavior: PEBKAC or Bug?

2011-03-03 Thread David Muir
Zend_Date is next to useless for validating dates: http://framework.zend.com/issues/browse/ZF-7583 You're better off building your own date validator. Cheers, David -- View this message in context: http://zend-framework-community.634137.n4.nabble.com/Zend-Date-Behavior-PEBKAC-or-Bug-tp3331849p3

Re: [fw-general] Zend Acl constructor

2011-03-03 Thread Matthew Weier O'Phinney
-- benoit wrote (on Thursday, 03 March 2011, 03:06 AM -0800): > Why Zend Acl has no constructor ? > We can set acl rules in any config file (e.g ini file) and pass it to acl's > contructor. > Is there a particular reason that Zend_Acl has no constructor ? At the time Zend_Acl was created, usage o

[fw-general] Re: Setting a custom route seems to break zend_navigation URLs

2011-03-03 Thread Stryks
Peter Sharp wrote: > > I have defined a custom route in order to capture a parameter in the > middle > of a URL. > > ... > > Which seemed to give the desired result. However, once I have arrived at > the URL, all my zend_navigation URL's insert the literal part of the > custom > route. i.e. t

Re: [fw-general] Service Layer, domain objects, mapers and approaches

2011-03-03 Thread Serkan Temizel
As far as I understand this concept some questions rise like, Where domain objects live? Where mappers live? Where and how to access them? So Matthew for your example of service layer what does fetch() method includes? class BlogResource { public function create($data) public

RE: [fw-general] Zend guru advise on how to build a secure function - could we make a proposal out of this ?

2011-03-03 Thread Thomas D.
Hi, Zladivliba Voskuy wrote > Ok, I know this function is not secure, but could we make it into a secure > one that maybe could be added to ZF so people who need secure text > (meaning Alnum + punctuation, could use it. > > [...] > > class SecureText implements Zend_Filter_Interface{public

[fw-general] Zend Acl constructor

2011-03-03 Thread benoit
Hi all, Why Zend Acl has no constructor ? We can set acl rules in any config file (e.g ini file) and pass it to acl's contructor. Is there a particular reason that Zend_Acl has no constructor ? Cheers. -- View this message in context: http://zend-framework-community.634137.n4.nabble.com/Zend-Acl

Re: [fw-general] Zend guru advise on how to build a secure function - could we make a proposal out of this ?

2011-03-03 Thread Andreas Möller
> Ok, I know this function is not secure, but could we make it into a secure > one that maybe could be added to ZF so people who need secure text (meaning > Alnum + punctuation, could use it. Now I have no idea *how* to write it > correctly so it's secure but the idea would be to have somehting

RE: [fw-general] Zend guru advise on how to build a secure function - could we make a proposal out of this ?

2011-03-03 Thread Zladivliba Voskuy
Ok, I know this function is not secure, but could we make it into a secure one that maybe could be added to ZF so people who need secure text (meaning Alnum + punctuation, could use it. Now I have no idea *how* to write it correctly so it's secure but the idea would be to have somehting secure