I have 2 URLs: /profile /save_profile
"/profile" renders a form that has "/save_profile" as its action attribute. Unfortunately, one could do this: www.mydomain.com/save_profile and it would be executed. Is there a way to make such urls not callable to the outside world? Can such URLs be masked/hidden? I had to add it in my routes configuration otherwise the form would not have found it. Thanks --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To post to this group, send email to pylons-discuss@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/pylons-discuss?hl=en -~----------~----~----~----~------~----~------~--~---