David Greminger comments

Results 82 comments of


                                            David Greminger

Show security advisories

Or use the existing security checker from sensiolabs: https://github.com/sensiolabs/security-checker

Is there some options to check the permission of an other user than the logged one

PR #29 solves your exact issue probably, doesn't it?

Is there some options to check the permission of an other user than the logged one

@GreGosPhaTos I don't know. But @badaz should probably know it ;-)

No double aliases with multi domain installation

I can copy this (apart from the alias `index`). There were also URL prefixes for different languages configured. /cc @aschempp

Prevent loading of DCA column types in User class

Isn't there a default language on the `Request` object in case there is no language set on the user?

Undefined constant "Contao\BE_USER_LOGGED_IN" on 404 page

I can't reproduce this behaviour. Can you explain a bit more, how you force this situation? Which PHP version, which error level? In my tests I always have a `Anonymous...

Enable login rate limit

Hmm, good question. Our mechanism works only for existing accounts so the Symfony rate limiter covers both (existing and non-existing).

Prevent password spraying in ModuleLogin

I'll assign this to me and check what Symfony Security or possible bundles do offer here.

Symfony 6 support?

Hi there - is there any way to give support for a new 2.x release? Some sort of extended testing? I don't like to require `dev-master` 😏

Symfony 4 Cache key must be string, "NULL" given

Could you give some more information about your used versions of symfony components?