Cgiapp 1.5 released
Cgiapp 1.5 has been released; you may now download it.
This release fixes a subtle bug I hadn't encountered before; namely, when a
method name or function name is passed as an argument to mode_param(), run()
was receiving the requested run mode⦠and then attempting to process that as the
mode param. The behaviour is now fixed, and is actually simpler than the
previous (non-working) behaviour.
Also, on reading Chris Shiflet's paper on PHP security, I
decided to reinstate the query() method. I had been using $_REQUEST to check
for a run mode parameter; because this combines the $_GET, $_POST, and
$_COOKIE arrays, it's considered a bit of a security risk. query() now
creates a combined array of $_GET and $_POST variable ($_POST taking
precedence over $_GET) and stores them in the property $_CGIAPP_REQUEST; it
returns a reference to that property. run() uses that property to determine
the run mode now.
Enjoy!