[symfony-users] Primary Key Forgery Attack?

2009-09-02 Thread Jeremy Thomerson
I have a question. In Symfony / Propel forms, when I am editing an object, the primary key is a hidden field. I have verified that by using Tamper Data (or anything of the nature), I can modify a different row in the database (iow, someone else's information) by simply changing the ID value in

[symfony-users] creating drop down in index template

2009-09-02 Thread sunny
Creating a Drop-Down List Based on a Foreign Key Column in index template . --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups symfony users group. To post to this group, send email to symfony-users@googlegroups.com To

[symfony-users] Re: Primary Key Forgery Attack?

2009-09-02 Thread Sid Bachtiar
Hi Jeremy, Those Symfony / Propel generated forms are basic with no security. You will need to secure them based on the requirements of your project. You don't secure a record from unauthorized access by obscuring the ID, you actually have to check to make sure that a user is allowed to access

[symfony-users] User group and permission in sfGuardPlugin

2009-09-02 Thread veasna.phal
Dear all, I am currently a new symfony starter. Now I am in day 13 The User, and I have a problem with user group and permission. The question is How can I give the credential to the group and how to enable it. Because when I try to create a different user in different group that have different

[symfony-users] Plugin for Multiple Upload

2009-09-02 Thread Avani
Hi all, Anyone know any plugin available in symfony for multiple upload? I want to do that for multiple upload of pics for creating photo album like orkut and facebook.. Any Idea? Pls help me. Thanks in advance. --~--~-~--~~~---~--~~ You received this message

[symfony-users] Re: Plugin for Multiple Upload

2009-09-02 Thread Johannes Heinen
Wrote this a few weeks ago: http://www.symfony-project.org/plugins/sfWidgetFormInputSWFUploadPlugin I'd be kind and helpful if you'd give it a try and help improve the javascripts/stylesheets for cross browser compatibility (think it works in major browsers = IE6. If you browse the plugin page

[symfony-users] Re: help on Virtual columns display in List view of symfony demo setup tutorial day 12

2009-09-02 Thread yyyyxxxx42
Hi I got to fix it as i was missing something: 'layout: stacked' On Sep 1, 6:12 pm, Eno symb...@gmail.com wrote: On Tue, 1 Sep 2009, 42 wrote: jobeet/1_2/Doctrine/en/12#chapter_12_sub_virtual_columns). I think I followed the guide as per described and changing in file 'apps\backend

[symfony-users] Xampp related issue

2009-09-02 Thread DEEPAK BHATIA
Hi, I know that Symfony Group is not a forum to ask this question but I am not getting help on this. I have installed XAMPP on linux. By default ssl is working so when run https://localhost it shows xampp screen. Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't work.

[symfony-users] Re: Xampp related issue

2009-09-02 Thread Sid Bachtiar
How do you know http://localhost stops working? Did you check apache/httpd error log? On Wed, Sep 2, 2009 at 10:54 PM, DEEPAK BHATIAtoreachdee...@gmail.com wrote: Hi, I know that Symfony Group is not a forum to ask this question but I am not getting help on this. I have installed XAMPP on

[symfony-users] Newsletter plugin?

2009-09-02 Thread Lambert
Hello, Is there a symfony newsletter plugin (no, I cannot find it...), has someone developed it or is someone interested in co-developing one for publication? Lambert --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups

[symfony-users] Re: help with customizing sfguard

2009-09-02 Thread pcummins
You have a typo in your template. $applicatonName is missing an i. On Sep 2, 12:42 am, jarthel jart...@gmail.com wrote: also, there's a topic about Customize the sfGuardUser model. It seems I can make changes to the schema.yml for user profiles. Does that mean I need to also make appropriate

[symfony-users] Re: Xampp related issue

2009-09-02 Thread DEEPAK BHATIA
Hi, I get the error 425 HTTP Error :Unable to connect with remote host. But error_log in logs directory gives this below [Wed Sep 02 17:13:57 2009] [notice] Apache/2.2.11 (Unix) DAV/2 mod_ssl/2.2.11 OpenSSL/0.9.8i PHP/5.2.8 mod_apreq2-20051231/2.6.0 mod_perl/2.0.4 Perl/v5.10.0 configured --

[symfony-users] Help Please! - Error with Jobeet

2009-09-02 Thread Martin - Digital Express
I´m new with symfony, and I´m trying to start with Jobeet but I have an error when trying to insert-sql with doctrine. I run the command below with this error: D:\AppServ\www\symfony\sfprojectsymfony doctrine:build-sql doctrine generating sql for models While exporting model class

[symfony-users] Re: Help Please! - Error with Jobeet

2009-09-02 Thread Gábor Fási
Are you sure you have pdo_mysql enabled in the php.ini your command line interface uses? On Wed, Sep 2, 2009 at 13:55, Martin - Digital Expressmartin.va...@gmail.com wrote: I´m new with symfony, and I´m trying to start with Jobeet but I have an error when trying to insert-sql with doctrine.

[symfony-users] Re: parameters in configure()

2009-09-02 Thread Germana Oliveira
Eno escribió: On Tue, 1 Sep 2009, Germana Oliveira wrote: BUT I HAVE TWO PROBLEMS: 1. with a new form (isNew): Notice: Undefined offset: 0 in /home/germana/www/indepabis/lib/form/PersonaForm.class.php on line 53 Were these form classes generated from models? Yes, these

[symfony-users] Re: Newsletter plugin?

2009-09-02 Thread Reynier Pérez Mira
Lambert wrote: Hello, Is there a symfony newsletter plugin (no, I cannot find it...), has someone developed it or is someone interested in co-developing one for publication? I could help you, just let me know what you need and what is my part here Cheers -- Ing. Reynier Pérez Mira

[symfony-users] sfValidatorDate with min/max and date_format

2009-09-02 Thread CA
I am using sfValidatorDate to check that a date is in the 'mm/dd/yy' format. 'date_format' is causing Min and Max to fail. I believe the failure is caused by the shortened year format. How can I get the validator to enforce both the date format and the min/max. I tried using the 'date_format'

[symfony-users] Re: Help Please! - Error with Jobeet

2009-09-02 Thread Eno
On Wed, 2 Sep 2009, Martin - Digital Express wrote: D:\AppServ\www\symfony\sfprojectsymfony doctrine:build-sql doctrine generating sql for models While exporting model class 'JobeetAffiliate' to SQL: Couldn't locate driver n amed mysql Looks like you dont have pdo_mysql in your PHP.

[symfony-users] Re: Xampp related issue

2009-09-02 Thread Eno
On Wed, 2 Sep 2009, DEEPAK BHATIA wrote: Now I stop ssl by /opt/lampp/lampp stopssl, but http://localhost doesn't work. To run without SSL, you run the 'stopssl' command above but then use just 'start' to start. -- --~--~-~--~~~---~--~~ You received this

[symfony-users] Re: Xampp related issue

2009-09-02 Thread DEEPAK BHATIA
Thanks Actually I am accessing the linux machine through telnet and doing stopssl and then start. Now when I run http://10.0.1.66, I get the error that 425 HTTP Error, Unable to connect with remote host. Thanks On Wed, Sep 2, 2009 at 7:23 PM, Enosymb...@gmail.com wrote: On Wed, 2

[symfony-users] Re: Primary Key Forgery Attack?

2009-09-02 Thread Jeremy Thomerson
Yeah - but it's better to have both kinds of security. The validation that the same ID is coming back in is simple and can be generically added to all Propel forms from a single place. That makes securing it with business logic easier, because you don't have to worry about invalid IDs. I

[symfony-users] Re: creating drop down in index template

2009-09-02 Thread Hellmich Dennis
Is this a question? Am 02.09.2009 um 08:26 schrieb sunny: Creating a Drop-Down List Based on a Foreign Key Column in index template . --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups symfony users group. To

[symfony-users] Re: Xampp related issue

2009-09-02 Thread DEEPAK BHATIA
Hi Eno, Please help me in resolve this issue. The symfony web site we have developed in based on Linux hence we are using https to access the same. Why does http://10.0.1.66 doesn't work ? Thanks Deepak On Wed, Sep 2, 2009 at 9:36 PM, DEEPAK BHATIAtoreachdee...@gmail.com wrote:

[symfony-users] Re: Xampp related issue

2009-09-02 Thread Eno
On Wed, 2 Sep 2009, DEEPAK BHATIA wrote: Actually I am accessing the linux machine through telnet and doing stopssl and then start. stopssl switches off SSL in the config permanently, so maybe you have to issue a stop after that then a start to restart without SSL. Now when I run

[symfony-users] Re: sfDoctrineActAsTaggablePlugin question

2009-09-02 Thread Andrei Dziahel
Hi. Have you tried to pass to getPopulars() a query similar to this one? $q = Doctrine_Query::create()-from('Article a')-where('a.active = ?', true); 2009/9/1 Kevin Bond kevinb...@gmail.com Hi Guys, I have a question about this plugin for anyone who knows about it. I have an Article

[symfony-users] dissapearing DB menu in debug toolbar - no listener for creole events.

2009-09-02 Thread rosbif
My symptom is that the DB menu in the debug toolbar has dissapeared (only on certain machines). After searching in the code, I've discovered that there are no listeners for application.log events for sfDebugConnection objects, so the dispatcher isnt sending creole log messages to function

[symfony-users] Re: User group and permission in sfGuardPlugin

2009-09-02 Thread Abraham Montilla
Hello Veasna, to set the credentials allowed to an application or module go to project-name/apps/app-name/config/security.yml (in the case of an app) or project-name/apps/app-name/modules/module-name/config/security.yml (in the case of a module, you have to create this file as symfony doesn't

[symfony-users] Set required fileds by language (i18n)

2009-09-02 Thread Chtipepere
Hi everybody, Does anybody knows how to set a field required for a given language, and not for all languages, in a form ? In the ObjectFormTranslation.class.php ? e.g. : A news object which have a title for 3 differents languages and one of these is three language is required in the form (and

[symfony-users] Re: help with customizing sfguard

2009-09-02 Thread jarthel
doh! thank you! :D On Sep 2, 9:16 pm, pcummins patwcumm...@gmail.com wrote: You have a typo in your template. $applicatonName is missing an i. On Sep 2, 12:42 am, jarthel jart...@gmail.com wrote: also, there's a topic about Customize the sfGuardUser model. It seems I can make changes

[symfony-users] Re: help with customizing sfguard

2009-09-02 Thread jarthel
more questions please :) 1. how do I display validation errors in custom template? I was able to find the source of the default signinSuccess.php but it's unclear on what to include in my template. I believe the default form uses this class = sfGuardFormSignin.class.php. 2. How do I tell

[symfony-users] difficulty with running native SQL command

2009-09-02 Thread wasabhi
Hi there, I'm developing in Symfony 1.2.4, using Propel and MySQL as my database. I've written a task that: 1. grabs a set of CSV files from a reporting source 2. uploads the CSV files using MySQL's 'load data infile ... ' syntax It's step 2 above that is proving to be problematic. The