From 6fc0770bcee09045366c61afcf442337a98e44b2 Mon Sep 17 00:00:00 2001 From: Taylor Otwell Date: Wed, 6 Jul 2011 13:35:59 -0700 Subject: [PATCH] Continuing to clean up Input class. --- system/input.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/system/input.php b/system/input.php index dee58d52..97caf658 100644 --- a/system/input.php +++ b/system/input.php @@ -103,8 +103,10 @@ public static function hydrate() case 'PUT': case 'DELETE': + // The request method can be spoofed by specifying a "REQUEST_METHOD" in the $_POST array. // If the method is being spoofed, the $_POST array will be considered the input. + if (isset($_POST['REQUEST_METHOD']) and in_array($_POST['REQUEST_METHOD'], array('PUT', 'DELETE'))) { static::$input =& $_POST;