Securing the application

Lets say we have two different applications which are part of bigger system so they have the same set of users. If it is some closed system you will probably want to restrict some groups of users from accessing one o the applications (ie. client didn't buy that feature so his users shouldn't use it). If you wanted to use the standard credentials system implemented in the symfony, you'd have to check in each action if user have a proper credential.  In our system we have hundreds of actions so it'd be a real nightmare. Especially you'd have to do it for both apps.

Double submit issue

I know I know, it had been discussed to death before. There are some solutions but in our application the new problem arised. The main problem are not impatient users cos our forms are secured against double-clicks. The thing is: we're using ExtJS and thus our application awaits for callbacks to display appropiate message to the user. But as some our users use mobile internet the connection faults happen quite often. When callback don't reach the browser, the script displays connection error message.

First post ;)

Took me some time to decide if I should start a blog or not. But in the end I thought it is a good idea to store my thoughts and solutions at some place where I can come back to. So here I am ;) I choose blogspot cos I don't really have time for writing my own blog. Besides, why should I reinvent the wheel? :P

In this blog I'll focus on Symfony framework and overall PHP issues I happen to step by during my work.