# Rail 2.3.2 Protect\_from\_forgery

**URL:** <https://www.ruby-forum.com/t/rail-2-3-2-protect-from-forgery/167611>\
**Category:** Rails\
**Created:** [May 10, 2009, 6:43am UTC](https://www.ruby-forum.com/t/rail-2-3-2-protect-from-forgery/167611 "2009-05-10T06:43:52Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![df-sean](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/d/f07891/32.png) [@df-sean](https://www.ruby-forum.com/u/df-sean)\
**Post date:** [May 10, 2009, 6:43am UTC](https://www.ruby-forum.com/t/rail-2-3-2-protect-from-forgery/167611/1 "2009-05-10T06:43:52Z")

</div>

Is rails supposed to auto-generate a protect\_from\_forgery secret for me?  
In the application controller I do not get a secret code to uncomment.  
When I manually create one and attempt to use it, it does not work.