|
Thursday 20 December 2007 2:17:54 pm
Hi Heath, Thanks for the tips - I actually forgot to look for solutions within the projects site. Especially Kristof's objectvalidation seems interesting, but unfortunately it's not available for download... or maybe it is for logged in users, but I don't happen to have an account there... If you have one, could you please check it for me? As for as my own investigation... Even if I cannot perform validation on the object level, the attribute level and validation methods perfectly see POST variables, so there's a bit of possibilities there. Also, one of the things that I may need is a change-protected text line or integer. Since I have to be 100% sure that it remains unchanged from the moment of object's creation through all the editing sessions, I was thinking about a datatype that would check a hash of the value and some unique data, for example: sha1($sessionID.$salt.$attributeValue.$contentObjectID). This should be difficult to skip and also to somehow forge. We'll see how it works, it's just a concept for now ;)
--
Company: mediaSELF Sp. z o.o., http://www.mediaself.pl
eZ references: http://ez.no/partners/worldwide_partners/mediaself
eZ certified developer: http://ez.no/certification/verify/272585
eZ blog: http://ez.ryba.eu
|