D e fi n i t i v e G u i d e t o Y i i 2 . 0 h t t p : / / w w w . y i i f r a m e w o r k . c o m / d o c / g u i d e Q i a n g X u e, A l ex a n d er M a k a r o v , C a r s t en B r a n d t , K P a u l , a n d m a n y co n t r i b u t o r s f r o m t h e Y i i co m m u n i t y T h i s t u t o r i a l i s r e l e a s e d u n d e r t h e T e r m s o f Y i i D o c u m e n t a t i o n . C o p y r v e d . C o n t e n t s 1 I n t r o d u c t i o n 1 1 . 1 W h a t i s Y i i . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 1 . 2 U p g r a d i n g f r o m V e r s i o n 1 . 1 . . . .

2008- 2009. Al l R i gh t s R e s e r v e d . C o n t e n t s C on t e n t s i L i c e n s e x i 1 G e t t i n g S t a r t e d 1 1. 1 T h e D e fi n i t i v e G u i d e t o Yi i . . . . . . . . . . . . . . 3 1. 3 Up gr ad i n g f r om Ve r s i on 1. 0 t o 1. 1 . . . . . . . . . . . . . . . . . . . . . . . 3 1. 3. 1 C h an ge s R e l at e d w i t h M od e l S c e n ar i os . . . . . . . . . . an ge s R e l at e d w i t h E age r Load i n g f or R e l at i on al Ac t i v e R e c or d . 4 1. 3. 3 C h an ge s R e l at e d w i t h T ab l e Al i as i n R e l at i on al Ac t i v e R e c or d . .

2008- 2009. Al l R i gh t s R e s e r v e d . C o n t e n t s C on t e n t s i L i c e n s e i x 1 G e t t i n g S t a r t e d 1 1. 1 T h e D e fi n i t i v e G u i d e t o Yi i . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 1. 3. 1 R e q u i r e m e n t s . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 1. 3. 2 W h at i s Yi i B e s t k s ? . . . . . . . . . . . . 3 1. 4 I n s t al l at i on . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 1. 4. 1 R e q u i r e m e n t s . . . . . . . . . . . . . . . . . .

i a n g X u e, A l ex a n d er M a k a r o v , C a r s t en B r a n d t , K l i m o v P a u l , a n d m a n y co n t r i b u t o r s f r o m t h e Y i i co m m u n i t y 简体中文 t r a n s l a t i o n p r : / / w w w . y i i ch i n a . co m , cu i l eo n , q i a n s en 1 3 8 6 , d eep zi y u , s h i - y a n g , i y u a n c, x i a o l i u s h i f u , j h q 0 1 1 3 , f u n s o n 8 6 , r i v er l et , a b b r a h a m g r ey s o n , f en g y h 轔 轨 轩 轳 轴 轵 轴 软 轲 轩 轡 转 轩 轳 轲 轥 转 轥 轡 轳 轥 轤 轵 轮 轤 轥 轲 轴 轨 轥 轔 轥 轲 轭 轳 软 车 轙 轩 轩 轄 软 轣 轵 轭 轥 轮 轴 轡 轴 轩 软 轮 輮 轃 软 轰 轹 轲 轩 轧 轨 轴 輲 輰 輱 輴 轙 轩 轩 轓 软 车 轴 轷 轡 轲 轥 轌 轌 轃

三、攻防原理 四、防护产品体系 1.1.技术背景 n Web成为主流的网络和应用技术 q CNCERT/CC 网络安全监测系统对流量数据进行的抽样统计 显示，Web 应用流量占整个TCP 流量的81.1% q B/S居统治地位：网上银行、电子商务、电子政务、证劵、 手机上网 3 1.2.安全威胁 1.2.安全威胁 n SANS年发布的全球20大安全风险排行榜上，Web应 b应 用安全漏洞名列前茅，攻击者利用最多的漏洞是SQL 注入及跨站脚本 n 根据国家计算机网络应急技术处理协调中心(简称 CNCERT/CC)上半年的工作报告显示，网站漏洞百出， 被篡改的大陆网站数量明显上升，总数达到28367个， 比去年全年增加近16% 1.3. 相关政策、法规（1） n PCI DSS 美国，2008年PCI法案通过之后，要求提供信 用卡网上支付超过一定营业额的企业，都需要 用卡网上支付超过一定营业额的企业，都需要 配置Web应用防火墙或进行代码级应用安全加 固。 1.4. 相关政策、法规（2） n 胡锦涛总书记重要指示 q “把握信息化发展的方向、维护国家在网络空间的安全和利益成 为信息时代的重大战略课题。” n 政策文件和规划中对信息安全的要求 q 《国家信息化的战略目标（2006-­2020）》指出：“建立和完善 信息安全等级保护制度，重点保护基础信息网络和关系国家安全、

by default since 4.1.0. The files data will now always contain UploadedFileInterfaces objects. I18n • FrozenDate was renamed to Date and FrozenTime was renamed to DateTime. • Time now extends Cake\Chronos\ChronosTime permissions will be setup properly: HTTPDUSER=�ps aux | grep -E '[a]pache|[h]ttpd|[_]www|[w]ww-data|[n]ginx' | grep -v root␣ ˓→| head -1 | cut -d\ -f1� setfacl -R -m u:${HTTPDUSER}:rwx tmp setfacl -R -d key allows you to override the default model error messages and can be used, for example, to set i18n messages. To disable the error message output & field classes set the 'error' key to false. Defaults

Running Shells as cronjobs Completion Shell Code Generation with Bake Schema management and migrations I18N shell ACL Shell Test shell Upgrade shell Development Configuration Database Configuration Additional permissions will be setup properly: HTTPDUSER=`ps aux | grep -E '[a]pache|[h]ttpd|[_]www|[w]ww-data| [n]ginx' | grep -v root | head -1 | cut -d\ -f1` setfacl -R -m u:${HTTPDUSER}:rwx app/tmp setfacl -R -d key allows you to override the default model error messages and can be used, for example, to set i18n messages. It has a number of suboptions which control the wrapping element, wrapping element class name

plugins, and handling errors for plugins that may not exist because they are dev dependencies. I18n • Number::FORMAT_CURRENCY_ACCOUNTING was added. • Number::CURRENCY_ACCOUNTING was added. • Numbe FrozenTime, Date and FrozenDate now accepts a callable that can be used to return a custom string. • The i18n global functions now only return strings. The changes made to 4.0 to remove the null return value when necessary anymore. This makes it consistent to how Shell classes worked. • The default format for Cake\I18n\Time, FrozenTime, Date, and FrozenDate is now yyyy-MM-dd'T'HH':'mm':'ssxxx which solves localization

Option Parsers Running Shells as Cron Jobs CakePHP Provided Commands Cache Tool Completion Tool I18N Tool Plugin Tool Schema Cache Tool Routes Tool Server Tool Interactive Console (REPL) Routing in the Internationalization & Localization Setting Up Translations Language Files Extract Pot Files with I18n Shell Setting the Default Locale Changing the Locale at Runtime Using Translation Functions Using Namespaces Creating a Child Constants & Functions Global Functions __d() __dn() __dx() __dxn() __n() __x() __xn() collection() debug() dd() pr() pj() env() h() pluginSplit() namespaceSplit() Core Definition

Option Parsers Shell Helpers Running Shells as Cron Jobs CakePHP Provided Commands Cache Shell I18N Shell Completion Shell Plugin Shell Routes Shell Schema Cache Shell Server Shell Upgrade Shell Shells Internationalization & Localization Setting Up Translations Language Files Extract Pot Files with I18n Shell Setting the Default Locale Changing the Locale at Runtime Using Translation Functions Using plugins, and handling errors for plugins that may not exist because they are dev dependencies. I18n Number::FORMAT_CURRENCY_ACCOUNTING was added. Number::CURRENCY_ACCOUNTING was added. Number::getDe