On Jueves, 1 de Octubre de 2009 05:56:37 tim escribió: > I noticed that if I pull up a page manually which has an > authenticity_token=blah on it and I remove the token and do the post > it just does the edit and doesn't complain. > > Is that variable being checked at all? What is the purpose of it?
authenticity_token is sent with the form, and it's for protect_from_forgery, a rails feature. It shouldn't be added to url query string, because it's not needed, but sometimes it happens -- Sergio Cambra .:: entreCables S.L. ::. Mariana Pineda 23, 50.018 Zaragoza T) 902 021 404 F) 976 52 98 07 E) [email protected] --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "ActiveScaffold : Ruby on Rails plugin" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/activescaffold?hl=en -~----------~----~----~----~------~----~------~--~---
