Since the default generated scaffold will process a delete action from a simple GET request its a good idea to add something to your controller to prevent this.
Cake can protect you against this via the Security Component.
The Security Component (the Cake Manual)