This should go somewhere in the book.
On Mar 11, 8:09 am, Massimo Di Pierro <[email protected]> wrote: > Without sessions you do not have CSRF protection. > > crud.create, > cruf.update > and form.accepts(request,session) > > are never supposed to work > > form.accepts(request) > > should work because no CSRF protection. > > On Mar 11, 2:38 am, sherdim <[email protected]> wrote: > > > Hello! > > > In the recent versions of web2py appadmin silently cannot insert new records > > if session.forget() in the model > > > At least in Version 1.90.6 (2010-12-20 11:24:15) it is working! > > > remedy is simple, but silent disfunction discourages > > > Vale! > >

