I guess you mean Form::open_multipart() , it could be added but not absolutely neccesary. The following works just fine as well: Form::open(array('enctype' => 'multipart/form-data'));For example: form_open_multipart()
There's CSRF tools in the security class, it hasn't been integrated with the Form class but I disagree with the way CI has done this. People should handle the security in app specific ways and understand what they're doing, if they don't they're going to run into trouble anyway. You can't protect against stupidity. A good way to do it would be to add some option to validation that checks CSRF and a setting to creating forms that auto-adds the hidden field and validation. But this hasn't been implemented yet.And a Cross-site request forgery (CSRF) implementation
It looks like you're new here. If you want to get involved, click one of these buttons!