diff options
Diffstat (limited to 'railties/lib/rails_generator/generators/components/scaffold/templates/controller.rb')
-rw-r--r-- | railties/lib/rails_generator/generators/components/scaffold/templates/controller.rb | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/railties/lib/rails_generator/generators/components/scaffold/templates/controller.rb b/railties/lib/rails_generator/generators/components/scaffold/templates/controller.rb index ddc03e63ba..9595fcca61 100644 --- a/railties/lib/rails_generator/generators/components/scaffold/templates/controller.rb +++ b/railties/lib/rails_generator/generators/components/scaffold/templates/controller.rb @@ -11,6 +11,14 @@ class <%= controller_class_name %>Controller < ApplicationController end <% end -%> + + # GET should only be used for operations which are 'safe', or read-only. So require + # post for all actions which change state. + # + # http://www.w3.org/2001/tag/doc/whenToUseGet.html + verify :method=>:post, :only=>[:destroy<%= suffix %>, :create<%= suffix %>, :update<%= suffix %>], + :redirect_to=> {:action=>:list<%= suffix %>} + def list<%= suffix %> @<%= singular_name %>_pages, @<%= plural_name %> = paginate :<%= plural_name %>, :per_page => 10 end |