CakeDC/users — pull request #78 by elboletaire (2012-09-20 16:58:34+00:00)
Title: Fixed security issue on registration

The postData param is_admin is not removed from the data array, so anyone that injects the value with HTML/Javascript can be registered as admin.