Provided that he knows the link, yes. Hiding the button does not mean your action is inaccessible.
On Tue, Nov 23, 2010 at 10:45, Manu <[email protected]> wrote: > Thanks, that was what I was looking for. Why do you need to > forward404() on new and delete ? Could someone still execute those > actions even though the buttons are not there ? > > -- > If you want to report a vulnerability issue on symfony, please send it to > security at symfony-project.com > > You received this message because you are subscribed to the Google > Groups "symfony users" group. > To post to this group, send email to [email protected] > To unsubscribe from this group, send email to > [email protected] > For more options, visit this group at > http://groups.google.com/group/symfony-users?hl=en > -- If you want to report a vulnerability issue on symfony, please send it to security at symfony-project.com You received this message because you are subscribed to the Google Groups "symfony users" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/symfony-users?hl=en
