ab7f429a10
Spammers can bypass form_spam_protect plugin by using GET instead of POST. Fix this, by ensuring that unsafe operations are POSTs, rather than GETs. |
||
---|---|---|
.. | ||
controllers | ||
helpers | ||
models | ||
views |
ab7f429a10
Spammers can bypass form_spam_protect plugin by using GET instead of POST. Fix this, by ensuring that unsafe operations are POSTs, rather than GETs. |
||
---|---|---|
.. | ||
controllers | ||
helpers | ||
models | ||
views |