6 Commits

Author	SHA1	Message	Date
Tim Almdal	2991831c03	Fix for ticket #72	2009-05-06 14:45:44 +00:00
Bharat Mediratta	9cf2c57921	Normalize CSRF handling into the access helper. Probably not the best ... place for it, but it'll do for now. Do CSRF checking in the Admin controller so that we're safe across the board on the admin side.	2008-12-22 04:33:18 +00:00
Bharat Mediratta	c00dc21ba8	Add session based CSRF protection to all forms	2008-12-19 01:24:27 +00:00
Jozef Selesi	c3fc1cb7ec	* Added HTTP status constants and helper functions to REST helper. ... * HTTP header setting in comment module now going through REST helper API. * Fixed items controller test. * Fixed user installer test. * Fixed _create() handling in the REST controller. * Fixed routing for edit and add forms. * Added some tests for the REST controller. * Set svn:eol-style to LF on a bunch of files. * Added preamble to MY_Forge.php.	2008-11-20 01:25:29 +00:00
Bharat Mediratta	4610fc8e7f	Create Forge::add_rules_from() which pulls validation rules from the model and ... associates them with the form. This replaces the various _add_validation_rules() functions in the user and comment modules. Move user edit form into user helper for consistency with the comment module. Implement missing _form method in the user controller.	2008-11-16 07:51:42 +00:00
Tim Almdal	be67187ad9	Create MY_Forge to specify the defaul html	2008-11-16 06:43:31 +00:00