Disable form security CakePHP

Question

Is it possible to turn of all CakePHP security features for only 1 particular form in a view? So I don't get any hidden fields (tokens) in that form.

Thank you,

Bart

score 3 · Accepted Answer · answered Jun 12 '12 at 21:01

3

You can disable it for that action via:

public function beforeFilter() {
    parent::beforeFilter();
    if ($this->request->params['action'] == 'action') { 
        $this->Security->validatePost = false; 
    } 
}

answered Jun 12 '12 at 21:01

tigrang

6,767
1
20
22

score 0 · Answer 2 · edited May 23 '17 at 12:33

0

In order to remove annoying hidden inputs _Token.key and fields from your form (for instance, to clarify query string when you use GET method), you need to do following stuff on beforeRender in addition to beforeFilter from tigrang's answer:

function beforeRender() {
    parent::beforeRender();
    unset($this->params["_Token"]);
}

(This is actual at least for CakePHP 1.3)

edited May 23 '17 at 12:33

Community

1
1

answered Jul 17 '12 at 21:17

Serge S.

4,855
3
42
46

Disable form security CakePHP

2 Answers2