One other note: The $_POST/$_GET etc. are not actually arrays anymore,
so if you want an array for things like array_map or other array
functions you can use the ArrayObject method $_POST->getArrayCopy()
On Tue, Nov 25, 2008 at 8:42 AM, Owen Winkler <[EMAIL PROTECTED]> wrote:
>
> Over the weekend I committed some code that does some strange things to
> the $_GET, $_POST, $_SERVER, $_REQUEST, and $_COOKIE supergloabl arrays,
> in addition to handler_vars.
>
> These variables are now all replaced with an instance of the Superglobal
> class.
>
> The end result is that when you ask for the value of $_POST['foo'] (for
> example), the value has already been passed through InputFilter for
> removal of potentially malicious code.
>
> To obtain the raw, original value of the submission, you must use a
> construct that seems unnatural: $_POST->get('foo')
>
> The intent is to make it easy to use filtered values, and to make
> developers aware that they are using potentially unsafe values when they do.
>
> It would be useful to add some other filtering to the Superglobals class
> that could allow different levels of filtering. For that, some
> revisions to the InputFilter class may be required.
--
Matt Read
http://mattread.com
--~--~---------~--~----~------------~-------~--~----~
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/habari-dev
-~----------~----~----~----~------~----~------~--~---
