Refactoring input class to use Request::spoofed when hydrating input.

5bea9121 · Taylor Otwell · 5bb5adcf · 5bea9121
Commit 5bea9121 authored Jul 08, 2011 by Taylor Otwell
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 3 deletions

input.php system/input.php +1 -3

No files found.
--- a/system/input.php
+++ b/system/input.php
@@ -103,9 +103,7 @@ class Input {
 			case 'PUT':
 			case 'DELETE':
-				// The request method can be spoofed by specifying a "REQUEST_METHOD" in the $_POST array.
+				if (Request::spoofed())
-				// If the method is being spoofed, the $_POST array will be considered the input.
-				if (isset($_POST['REQUEST_METHOD']) and in_array($_POST['REQUEST_METHOD'], array('PUT', 'DELETE')))
 				{
 					static::$input =& $_POST;
 				}