Re: PHP 4.0 Bug #6124: Transparent SID adds to the form action, instead of adding a hidden field
| From: | Rasmus Lerdorf | Date: | Sat, 12 Aug 2000 16:59:55 +0000 |
| Subject: | Re: PHP 4.0 Bug #6124: Transparent SID adds to the form action, instead of adding a hidden field | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-28696@lists.php.net to get a copy of this message | ||
I am not disagreeing with the fix. I am disagreeing with the
logic. You are trying to justify the change based on specs where the real
problem is that CGI.pm is not flexible enough. There is nothing
technically incorrect about what PHP is doing.
-Rasmus
On Sat, 12 Aug 2000, Geoff Oakham wrote:
> On Sat, Aug 12, 2000 at 07:39:06AM -0700, Rasmus Lerdorf wrote:
> > Well, Netscape 4.x is quite happy to do:
> > ~
> > <form action="submit.cgi?varA=1" method="POST">
> > <input type="hidden" name="varB" value="2">
> > </form>
> >
> > Which I have actually used quite a bit.
>
> Perhaps.. but CGI.pm doesn't. (I've got legacy code that uses perl instead
> of php.. and I'm stuck, because it would a lot of work to move it over and I
> don't feel like hacking CGI.pm to handle multiple data inputs.)
>
> Does no one else see my point? REQUEST_METHOD tells you which way data's
> coming at you (get, post, or the other one..) so to me it's a pretty strong
> indication that you're only supposed to use one method at a time. Putting
> in a hidden field is an elegant solution that will work in *all* cases.. so
> why the fuss?
>
> Geoff
>