Thanks a lot Jens, I think I'll model it this way. Perhaps using a small ajax popup which contains the token instead of a new frame just asking if the record should be deleted.
On 13 Aug., 13:03, Jens Dittrich <[email protected]> wrote: > No or it depends on what you want to happen when a delete link is clicked. > No one forces you to commit a delete on a click on a link. As an example, > you could always display a page requesting a confirm for the delete request, > which could carry a token for that request. That way you could not delete by > just firing a get request. -- Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions. To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/cake-php
