Read the book about security component:
http://book.cakephp.org/view/1296/Security-Component

It states that you must use cake form helper. You also have a timeout value 
for your form submission.
If you are not using the form helper to create the forms then your forms are 
lacking hashes for CSRF protection and will be blackholed by default. The 
book is your friend.

-- 
Our newest site for the community: CakePHP Video Tutorials 
http://tv.cakephp.org 
Check out the new CakePHP Questions site http://ask.cakephp.org and help others 
with their CakePHP related questions.


To unsubscribe from this group, send email to
[email protected] For more options, visit this group at 
http://groups.google.com/group/cake-php

Reply via email to