[Deprecated] DMZ 1.5.3 (DataMapper OverZealous Edition)

[eluser]OverZealous[/eluser]
@macigniter

Just like what mcnux said, that should work fine. That's a feature of Active Record, it automatically converts ($field, NULL) to $field IS NULL. It does work.

@Poetawd
• All related objects must already be saved to the database to save a relationship. Only the primary object can still be new.

• I'm not sure you understand the risk, but maybe I'm misunderstanding what you wrote. The risk with code like you've written is that someone who is purposefully being malicious could send a different document ID back to the server. The server would then blindly save this document to the profile. The use might end up having access to someone else's document after this. The security issue isn't that the input is invalid, but does the user have access to that document id?

• The topic of a proper authorization setup is probably too big for this (already long) thread. I would recommend starting a new thread if you need more help with auth specifically.

@tdktank59

I always code in short tags (JSP heritage). I don't really understand why they would ever not be turned on. They also shouldn't ever be removed from the spec.

I understand that they can be turned off, and if I get some time, I'll change the example content and the htmlform views.