2 ms·
Two quick questions... Why is the name for the function "controller_edit" instead of "controller_save"? Why is post_only checked as part of the dispatch and no
by Xurinos 16y ago
Two quick questions... Why is the name for the function "controller_edit" instead of "controller_save"? Why is post_only checked as part of the dispatch and not inside the two functions?
Quickie older-style perl alternative structure where I use AUTOLOAD to figure out the exists/can situation:
use strict;
use warnings;
package Controller;
sub search {...}
sub view {...}
sub save {...}
sub delete {...}
sub AUTOLOAD {
# Do index stuff
}
...
package main;
...
my $method = $q->param('do');
Controller->$method;
- f00li5h 16y agoI didn't know AUTOLOAD could do that... neat!
- dgl 16y agoBeware this could have a huge security hole if you are taking method names from the user like that -- they can include a qualifying package name (normally you see SUPER:: used in this context, but it could be anything loaded). In your example not so much, but if the params to that call were also under the user's control. Say IO::File was loaded and I went to 'do=IO::File::open', I might be able to read/write files.
- Xurinos 16y agoI agree wholeheartedly. Never trust input.
- wizard_2 16y agoI grabbed that out of an older project, most of my newer ones only have a save.