Changeset 1498

Timestamp:

06/21/06 12:54:51 (2 years ago)

Author:

fabien

Message:

fixed changing case of a URL allows bypassing of validation and security rules (closes #466)

Files:

• trunk/CHANGELOG (modified) (1 diff)
• trunk/lib/controller/sfController.class.php (modified) (1 diff)

trunk/CHANGELOG

@@ -5 +5 @@
-         building you Propel model/sql (XML schema file (PATH/config/schema.xml) does not validate)
-         you can add a propel.schema.validate = false at the end of your config/propel.ini file.
+
+WARNING: Actions in the routing are now case sensitive. If you have a page with an 'index' action name,
+         your action must be named 'executeIndex' ('fooBar' => 'executeFooBar').
-
-* added component and partial cache

trunk/lib/controller/sfController.class.php

@@ -111 +111 @@
-
-        // action is defined in this class?
-strtolower('execute'.$controllerName), array_map('strtolower', get_class_methods($moduleName.$classSuffix.'s')
+'execute'.ucfirst($controllerName), get_class_methods($moduleName.$classSuffix.'s'
-        if ($defined)
-        {