Welcome Guest, Not a member yet? Register   Sign In
Search Results
    Thread: SecurityException Status Codes
Post: RE: SecurityException Status Codes

I don't understand why a 500 status code is so bad either. They tell me that it indicates a possible instability in your system that makes it a candidate to be exploited. It is sort of an encouragemen...
299 Views
6 Replies
04-01-2024, 01:40 AM
donpwinston
    Thread: SecurityException Status Codes
Post: RE: SecurityException Status Codes

Yes but it sends 500 codes for other things. This is not allowed by my security people. Replacing the ExceptionHandler class with my version is the only way I've come up with to fix the problem. Maybe...
299 Views
6 Replies
03-31-2024, 01:20 PM
donpwinston
    Thread: SecurityException Status Codes
Post: RE: SecurityException Status Codes

donpwinston Wrote: (03-27-2024, 04:26 AM) -- It appears CI4.4.3 is setting a 5XX status code for SecurityExceptions. My security people are complaining about this. They (unbelievably) have classified...
299 Views
6 Replies
03-27-2024, 06:17 AM
donpwinston
    Thread: SecurityException Status Codes
Post: SecurityException Status Codes

It appears CI4.4.3 is setting a 5XX status code for SecurityExceptions. My security people are complaining about this. They (unbelievably) have classified it as a HIGH/cat 1 severity security vulnerab...
299 Views
6 Replies
03-27-2024, 04:26 AM
donpwinston
    Thread: Default System Directory
Post: Default System Directory

I think the default systemDirectory property in app/Config/App.php should point to the vendor directory. It is silly not to use composer these days.
438 Views
2 Replies
10-28-2023, 03:34 AM
donpwinston
    Thread: .env Property Arrays
Post: RE: .env Property Arrays

kenjis Wrote: (10-23-2023, 05:11 PM) -- Yes, if you have the array key in the Config file, you can override it by .env. See https://codeigniter4.github.io/CodeIgniter4/general/configuration.html#env...
673 Views
4 Replies
10-28-2023, 03:32 AM
donpwinston
    Thread: New Registrar Feature
Post: RE: New Registrar Feature

donpwinston Wrote: (10-23-2023, 02:49 AM) -- kenjis Wrote: (10-22-2023, 10:06 PM) -- donpwinston Wrote: (10-22-2023, 06:36 PM) -- What is this CodeIgniter\Shield\Config namespace? -- It is just s...
692 Views
5 Replies
10-28-2023, 12:21 AM
donpwinston
    Thread: .env Property Arrays
Post: RE: .env Property Arrays

How about: contentsecuritypolicy.scriptSrc.0 = 'self' contentsecuritypolicy.scriptSrc.1 = 'https://banruptcynotices.uscourts.gov' or some sort of macro like syntax?
673 Views
4 Replies
10-25-2023, 03:01 AM
donpwinston
    Thread: Config Property for Turning on Config Cache
Post: Config Property for Turning on Config Cache

Any reason why there is not a config property we can set in .env to turn on the new Config cache feature? I don't like modifying the index.php file.
554 Views
3 Replies
10-23-2023, 05:25 AM
donpwinston
    Thread: .env Property Arrays
Post: .env Property Arrays

It would be nice to be able to specify non associative arrays like this: PHP Code: -- contentsecuritypolicy.scriptSrc = 'self' contentsecuritypolicy.scriptSrc = 'https://bankruptcynotices.uscourt...
673 Views
4 Replies
10-23-2023, 03:03 AM
donpwinston
    Thread: New Registrar Feature
Post: RE: New Registrar Feature

kenjis Wrote: (10-22-2023, 10:06 PM) -- donpwinston Wrote: (10-22-2023, 06:36 PM) -- What is this CodeIgniter\Shield\Config namespace? -- It is just sample code. It is a sample namespace. Probabl...
692 Views
5 Replies
10-23-2023, 02:49 AM
donpwinston
    Thread: New Registrar Feature
Post: New Registrar Feature

I'm looking for a way to modify config information without modifying the app/Config/* files. I don't believe I can do all that I want in the .env file.  For example how would I do this: PHP Code: -...
692 Views
5 Replies
10-22-2023, 06:36 PM
donpwinston
    Thread: CSRF with external forms
Post: RE: CSRF with external forms

68thorby68 Wrote: (10-07-2023, 03:40 AM) -- Hi, I have implemented CSRF on my site and all is working as expected hwn making AJAX posts to my controller(s).  However, it appears that external commu...
351 Views
2 Replies
10-08-2023, 05:59 AM
donpwinston
    Thread: Hey Now it is a time for CI Team to prepare and write a CI 4+ Tutorial Book
Post: RE: Hey Now it is a time for CI Team to prepare an...

I bought LonnieEzell's CodeIgniter 4 Foundations a while ago but I haven't actually read very much of it. I use to buy and read  programing books a lot. But nowadays I've stopped doing that. I haven't...
16,107 Views
23 Replies
09-23-2023, 11:21 AM
donpwinston
    Thread: v4.4.1 hot fix released!
Post: RE: v4.4.1 hot fix released!

Someone forgot to update the Installation section in the CodeIgniter manual with the 4.4.1 release.
3,173 Views
6 Replies
09-21-2023, 06:06 AM
donpwinston
    Thread: Suppress CLI Text?
Post: RE: Suppress CLI Text?

kenjis Wrote: (06-16-2023, 05:27 AM) -- See https://codeigniter4.github.io/CodeIgniter4/cli/spark_commands.html#running-via-cli -- There's gotta be a way to do this in the implementation so the use...
480 Views
3 Replies
06-16-2023, 05:33 AM
donpwinston
    Thread: Suppress CLI Text?
Post: Suppress CLI Text?

How do I suppress this? CodeIgniter v4.3.5 Command Line Tool - Server Time: 2023-06-16 12:01:49 UTC+00:00
480 Views
3 Replies
06-16-2023, 05:03 AM
donpwinston
    Thread: Using CLI For First Time
Post: Using CLI For First Time

I'd like to use CodeIgniter's CLI. When I do this: > php spark list I get: PHP Fatal error:  Uncaught Error: Undefined constant "CodeIgniter\CLI\ENVIRONMENT" in /var/www/html/vendor/codeigniter4/fr...
1,279 Views
0 Replies
06-16-2023, 03:55 AM
donpwinston
    Thread: Object of type CodeIgniter\Session\Session is not callable
Post: RE: Object of type CodeIgniter\Session\Session is ...

kenjis Wrote: (05-02-2023, 06:03 AM) -- It seems you don't understand the difference between property and object invocation. These are different: PHP Code: -- $session->xyz $session('xyz') -- ...
2,608 Views
11 Replies
05-02-2023, 09:28 AM
donpwinston
    Thread: {csp-style-nonce} Does Not Work
Post: {csp-style-nonce} Does Not Work

{csp-style-nonce} doesn't work when the environment is "development" but the csp_style_nonce() does work. CSPEnabled is set to true. autoNonce is set to true. Is it because of the toolbar? Is this ...
245 Views
0 Replies
05-02-2023, 03:11 AM
donpwinston

Theme © iAndrew 2016 - Forum software by © MyBB