#6254: Security Component white paging (blackhole) on legitimate multiple
checkboxes
--------------------------+-------------------------------------------------
Reporter: milesj | Type: Bug
Status: new | Priority: Low
Milestone: 1.2.x.x | Component: Components
Version: 1.2 Final | Severity: Normal
Keywords: | Php_version: PHP 5
Cake_version: |
--------------------------+-------------------------------------------------
So I added the Security Component so that I may get the token checking on
all my forms. This works correctly except for pages where I have a list of
checkboxes (example, a list of messages with a checkbox, when you press
delete, it deletes all checked boxes).[[BR]][[BR]]
Ive tried the following two lines of code:[[BR]][[BR]]
echo $form->checkbox('Message.ids.'. $message['Message']['id']);[[BR]]
echo $form->input('Message.ids.'. $message['Message']['id'], array('type'
=> 'checkbox', 'div' => false, 'error' => false, 'label' =>
false));[[BR]][[BR]]
With the results looking correctly:[[BR]]
[[BR]]
<input type="hidden" name="data[Message][ids][1]" id="MessageIds1_"
value="0" />[[BR]]
<input type="checkbox" name="data[Message][ids][1]" value="1"
id="MessageIds1" />[[BR]]
[[BR]]
But every time I submit the form, and Security is enabled, im blackholed.
The second I comment out these checkboxes and submit the form, it goes
through. This is very troublesome, and right now I have to disable the
Security in certain actions using $this->Security->validatePost = false.
---------
On a related note, I have a visible input that has its value altered
through javascript. This also causes a blackhole for some odd reason.
--
Ticket URL: <https://trac.cakephp.org/ticket/6254>
CakePHP : The Rapid Development Framework for PHP <https://trac.cakephp.org/>
Cake is a rapid development framework for PHP which uses commonly known design
patterns like ActiveRecord, Association Data Mapping, Front Controller and MVC.
Our primary goal is to provide a structured framework that enables PHP users at
all levels to rapidly develop robust web applications, without any loss to
flexibility.
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"tickets cakephp" group.
To post to this group, send email to tickets-cakephp@googlegroups.com
To unsubscribe from this group, send email to
tickets-cakephp+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/tickets-cakephp?hl=en
-~----------~----~----~----~------~----~------~--~---
