On 03.04.2011, at 18:09, Jordi Boggiano wrote:
> On 03.04.2011 18:06, Miha Vrhovnik wrote:
>> RE pt. 1.
>> I don't know where I read that, but, if you only have GET and POST, like
>> in our case, then the correct http verb should be in _method parameter
>> and the POST verb should be used. I think we could add the support for
>> that in request object.
>
> This is already supported by Request::getRequestMethod()
Ah ok, so I would just add:
<input name="_method" type="hidden" value="PUT">
The code is only triggered for POST's:
$this->method = strtoupper($this->server->get('REQUEST_METHOD', 'GET'));
if ('POST' === $this->method) {
$this->method = strtoupper($this->request->get('_method', 'POST'));
}
I guess for a DELETE via AJAX this would also work fine, for a non AJAX request
it would be a bit more annoying.
regards,
Lukas Kahwe Smith
[email protected]
--
If you want to report a vulnerability issue on symfony, please send it to
security at symfony-project.com
You received this message because you are subscribed to the Google
Groups "symfony developers" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/symfony-devs?hl=en