Set rout for default.ctp

i’m speaking about the opening page of my application. i have an add action in ArticlesController that i placed a form for it in default.ctp and it works. i also want to have a form for MessagesController in my default.ctp to get messages. you said it’s the core template and should not contain any controller related variables. you mean it’s not secure to have a from in there? because i prefer my application to be user-friendly and users be able to do what they want in the homepage and don’t need more clicks