ivo/ponzi
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added Request::spoofed method.

Browse Source
This commit is contained in:
Taylor Otwell
2011-07-08 12:38:54 -07:00
parent d0fafd1301
commit 5bb5adcf9c
1 changed files with 14 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
system/request.php
View File

@@ -69,14 +69,24 @@ class Request {
/** /**
* Get the request method. * Get the request method.
* *
* The request method may be spoofed if a hidden "REQUEST_METHOD" POST element
* is present, allowing HTML forms to simulate PUT and DELETE requests.
*
* @return string * @return string
*/ */
public static function method() public static function method()
{ {
return (array_key_exists('REQUEST_METHOD', $_POST)) ? $_POST['REQUEST_METHOD'] : $_SERVER['REQUEST_METHOD']; return (static::spoofed()) ? $_POST['REQUEST_METHOD'] : $_SERVER['REQUEST_METHOD'];
}
/**
* Determine if the request method is being spoofed by a hidden Form element.
*
* Hidden form elements are used to spoof PUT and DELETE requests since
* they are not supported by HTML forms.
*
* @return bool
*/
public static function spoofed()
{
return array_key_exists('REQUEST_METHOD', $_POST);
} }
/** /**