$this->request->get, $this->request->post, $this->request->file and also on ORM Layers $this->db->Table->validation However you might or might not need to revalidate() depending on the situation.with which you can add/remove criteria's at runtime also override the error message dynamically. You will find all these on validationCore Documentation
1.5.6