Feed items

CakeOTP 1.1 - User Registration with One Time Password for CakePHP Released

Submitted by Derick Ng on 20 April 2010 - 6:05am

CakeOTP is a reference implementation of User Registration with a secure, table-less and expirable implementation of One Time Password for the popular CakePHP development framework.

New in CakeOTP release 1.1

read more

How to: Automatic User Login in CakePHP

Submitted by Derick Ng on 13 April 2010 - 11:27am

Sometimes you need to enable silent (implicit) login for your users. A good example of this would be this - after a registration process, you would want to automatically login the user, rather then having him retype the user name and password.

In CakePHP there is a simple method in the Auth components that lets you login on the user's behave.

Here is how it is done:

read more

Security issue in CakePHP code documentation

Submitted by Derick Ng on 5 March 2010 - 3:37am

I have been using CakePHP for a long time now and enjoy every second. It provides a productive, easy to use and well document platform for PHP application. The key advantages for me are – transparent OR mapping, a strong Model View Controller framework, and tons of extra utilities that make your life better.

I have came across a possible security issue in one of cakePHP code examples. This section of code is responsible to authorize or un-authorize clients access to a certain action (MVC flow)

CakeOTP 1.0 - Secure, Expirable, Table-less One Time Password for CakePHP Released

Submitted by Derick Ng on 11 February 2010 - 11:34am

CakeOTP is a secure, table-less and expirable implementation of One Time Password for the popular CakePHP development framework.

A one-time password (OTP) is a password that is only valid for a single login session or transaction. It is commonly used in the internet for registration and password reminder process in which OTPs are provides to the user in a form of a link that the user uses to access in order to create/reset his password.

The problem is that most one-time password implementation involve maintaining additional database tables and batch process that handle the persistence and expire date of the one time password. This adds complexity and reduces performance.

CakeOTP 0.1 beta release - One Time Password Reference Implementation for CakePHP

Submitted by Derick Ng on 22 January 2010 - 12:05pm


I have started to implement the algorithm for tableless, secure One time password.

Here is a link to the Demo, and here is a link to the beta release.

The only thing you need to do other then the regular cakePHP setup is to create a user table (used by the CakePHP Auth component):

read more