Over the weekend I committed some code that does some strange things to
the $_GET, $_POST, $_SERVER, $_REQUEST, and $_COOKIE supergloabl arrays,
in addition to handler_vars.
These variables are now all replaced with an instance of the Superglobal
class.
The end result is that when you ask for the value of $_POST['foo'] (for
example), the value has already been passed through InputFilter for
removal of potentially malicious code.
To obtain the raw, original value of the submission, you must use a
construct that seems unnatural: $_POST->get('foo')
The intent is to make it easy to use filtered values, and to make
developers aware that they are using potentially unsafe values when they do.
It would be useful to add some other filtering to the Superglobals class
that could allow different levels of filtering. For that, some
revisions to the InputFilter class may be required.
Owen
--~--~---------~--~----~------------~-------~--~----~
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/habari-dev
-~----------~----~----~----~------~----~------~--~---
