diff --git a/system/form.php b/system/form.php index 9e67d25f..b1f6bd61 100644 --- a/system/form.php +++ b/system/form.php @@ -22,8 +22,8 @@ public static function open($action = null, $method = 'POST', $attributes = arra { $attributes['action'] = HTML::entities(URL::to(((is_null($action)) ? Request::uri() : $action), $https)); - // If the request method is PUT or DELETE, we'll default the request method to POST - // since the request method is being spoofed by the form. + // PUT and DELETE methods are spoofed using a hidden field containing the request method. + // Since, HTML does not support PUT and DELETE on forms, we will use POST. $attributes['method'] = ($method == 'PUT' or $method == 'DELETE') ? 'POST' : $method; if ( ! array_key_exists('accept-charset', $attributes)) @@ -33,8 +33,6 @@ public static function open($action = null, $method = 'POST', $attributes = arra $html = '