How would be the way to restrict a call to AJAX specific to its
controller/view?
 
For example
users_controller has a ajax function profile ()
journals_controller has a ajax function view ()
 
Basic idea:
Using firebug you can modify URL of links so a user could change the
users_controller "users/profile" link to "journals/view" then click the
modified link and the view function would load in a place where you
obviously do not want it to load.
 
Would adding if ($this->params['controller'] == 'what ever controller can
call the function') or something along those lines work?
 
Ideas, suggestions?
 
Thanks,
 
Dave 

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to 
[email protected]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to