Category: CakePHP

I recently implemented a YUI uploader for an application developed with CakePHP 1,3. I based me on the solution proposed in the Bakery: Ability to select and upload multiple files at once – under 5 mins..

As explained in the article SWFUpload and cakePHP, a trick is required to avoid losing the current session when you add a Flash uploader to your application.

The solution proposed in the Bakery comes with a component to solve this problem but it is useless. Below comes the rewritten component keeping correctly the current session:

<?php
class YuiUploaderComponent extends Object {

	/**
	 * Restore session from POST fields if possible.
	 * 
	 * This is required because flash plugin uses a different
         * session (id and user agent) from the application one.
	 * 
	 * @param Object &$controller pointer to calling controller
	 */
	public function initialize(&$controller) {
		if (!empty($_POST[Configure::read('Session.cookie')])) {
			//Restore session for our application and not session used by Flash plugin.
			$controller->Session->id($_POST[Configure::read('Session.cookie')]);
			//Required if application is configured to check session user agent.
			if (Configure::read('Session.checkAgent')) {
				$controller->Session->write('Config.userAgent', $_POST['userAgent']);
			}
		}
	}

}
?>

Changes made:

• The session should be restored before any call to a method of the CakeSession class. It means the trick has to be executed in the “initialize” method of the component and not in the “startup” method.
• If the variable Session.checkAgent in core.php is set to true (to check the user agent), the user agent should also be restored.