$Revision$
$Date$
Note: This is the only required module in the CTLF.
The purpose of this module is to implement a way to map HTTP (or other protocol) request directly to a object method call.
In CTLF Demo package mapping is implemented by ctlRequestMapper class instance defined in ./system/lib/ctl/ctlRequestMapper.class.php. The object created from this class checks for values in $_REQUEST PHP variable.
Of course object&action parameter pair could allow a malicious person to load objects that are not intended for that (e.g. object=adodb.adodb&action=GetAll).
To prevent this a security mechanism is installed in the mapper class that takes configuration parameters:
$config['mapper']['allow_deny_order']
$config['mapper']['deny']
$config['mapper']['allow']
Look at the config file for the values of these parameters.
...
Method Summary | |
---|---|
string | mapRequest() Maps HTTP request to object method. |
void | redirect(string $call, [array $params]) Redirects HTTP client to another object method |
Method Detail |
---|
string mapRequest ()
Maps HTTP request to object method.