This forum doesn’t allow zip attachments, so I’ve posted the patch here:
This patch is for the Input.php file in /system/libraries
To enable GET parameters, you’ll need to change your config to use PATH_INFO. Look for the following line in /application/config/config.php:
$config['uri_protocol'] = "AUTO";
Change it to:
$config['uri_protocol'] = "PATH_INFO";
The patch for Input.php are pretty minor. I’ve added a new member variable to the input class that tells you if you are involved in a postback or not. Usage:
if ($this->input->is_postback)
{
...
}
Finally I changed the post() method of the Input class to check both the $_POST and the $_REQUEST. It checks post first, then request. If specified in the config, it’ll XSS clean them both.
I understand that the main developer feels strongly about using GET, but my angle is that GET should “modify” the resource so that your URL’s point to “resources” and your GET parameters “act” on those resources.
Anyways, I hope this is helpful to someone. We’re using it in production on a public API we’re developing for our site.
Thanks,
Jon Gilkison
massify.com
