From 5bea9121afdbfd69c5d5a164229c43f6fe7b9220 Mon Sep 17 00:00:00 2001 From: Taylor Otwell Date: Fri, 8 Jul 2011 12:41:03 -0700 Subject: [PATCH] Refactoring input class to use Request::spoofed when hydrating input. --- system/input.php | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/system/input.php b/system/input.php index 0cf4a223..fac8aa54 100644 --- a/system/input.php +++ b/system/input.php @@ -103,9 +103,7 @@ public static function hydrate() case 'PUT': case 'DELETE': - // The request method can be spoofed by specifying a "REQUEST_METHOD" in the $_POST array. - // If the method is being spoofed, the $_POST array will be considered the input. - if (isset($_POST['REQUEST_METHOD']) and in_array($_POST['REQUEST_METHOD'], array('PUT', 'DELETE'))) + if (Request::spoofed()) { static::$input =& $_POST; }