Hi, you can add a list of allowed fields as third parameter. http://api.cakephp.org/1.2/class_model.html#ebe42ae387be89985b5a35dd428f5c81
Regards Günther K3 schrieb: > Hi, > > if for example end user changed the html form and adds another field, > he can update another field. > What i mean by example is changing: > > <form action="/groups/add" method="post"> > <input type="text" name="data[Group][name]"/> > <input type="submit" value="Submit"/></form> > > to > > <form action="/groups/add" method="post"> > <input type="text" name="data[Group][name]"/> > <input type="text" name="data[Group][access_level]"/> > <input type="submit" value="Submit"/></form> > > then access_level field will be updated.How can i prevent this? > > Thanks > > --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---
