[Deprecated] DMZ 1.5.3 (DataMapper OverZealous Edition)

[eluser]OverZealous[/eluser]
@Poetawd
Well, that might be correct (I'll get to the 'might be' in a second). Alternatively, you might want to accumulate all of the objects that need to be saved into an associative array, and save it all at once:

Code:

$profile = new Profile();
$profile->name = ... // set up profile, if necessary, or load in the existing one

$save_objects = array();

if($this->input->post('stCPF') != '')
{
    ...
    $save_objects['cpf'] = $cpf;
}

...

$profile->save($save_objects);

This will save your ITFKs at the same time as saving your $profile, eliminating one step.

But before saying it is OK, you have to ask yourself, can this be used to subvert my application?

Basically, you cannot trust any information that comes from the browser. I can easily modify the content dynamically and send a different idRg and idCpf than you sent. So, if your system allows for different users, and these users have different access rights, you need to validate every single piece of information you get from them.

For example, my application has multiple Company Accounts, and each company has multiple users. I have to make sure that not only each object belongs to the company of the logged in user, but that the logged in user has access rights to each object.

Again, this is different for every application, but you need to be aware of it. It makes me nervous when I see code that takes IDs directly from a POST and assumes they are safe. I'm always going to harp on this when I see this kind of code ;-)

---

As for Aptana, like I said, it's a complete IDE, so it can be overwhelming if you aren't used to it. I developed for about 5 months using DreamWeaver. I switched to a real IDE and my productivity had to have doubled.