Maybe you're not passing those fileds but someone else. It's quiete easy to inject new fields in a form.
Cheers 2008/10/7 teknoid <[EMAIL PROTECTED]>: > > While this works fine, and makes your app more secure... the real > question is why are you passing fields that do not need saving to the > controller? or why do you even have them in the form? --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "CakePHP" group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---
