CHtml::form - no CSRF validation

Yii 1.1 General Discussion
1

Hello,

I have used


CHtml::form()

to generate a form tag but I see no CSRF validation.

Why ?

Kind Regards,

Marian

2

have you enabled csrf validation in your config/main.php config file

3

example:




'components'=>array(

                'request'=>array(

                        'enableCsrfValidation'=>true,

                ),

)
4

Aha, that was it. Thank you :)

Now… do I need to do something to validate the token or Yii does this automatically ?

5

It does it automatically :)

6

Great. Thank you :)