Re: [web2py] session.forget(response) prevents SQLFORM.factory from working

2013-08-20 Thread LightDot
The form can be forced to work without sessions but I strongly advise against doing it, for security reasons (CSRF protection, etc.): if form.process(session=None).accepted: ...code... Regards, Ales On Wednesday, August 21, 2013 2:14:12 AM UTC+2, Ricardo Pedroso wrote: > > > On Wed, Aug 21, 201

Re: [web2py] session.forget(response) prevents SQLFORM.factory from working

2013-08-20 Thread Ricardo Pedroso
On Wed, Aug 21, 2013 at 12:26 AM, wrote: > session.forget(response) prevents SQLFORM.factory from working. Is this > supposed to happen? If so, why? I was hoping it would prevent the session > files from being written. > > To secure forms submission web2py needs to store an hash in the session to