[mod_python] Filtering POST requests (req.read ())

[+ adding mod_python]


On Tue, 15 Feb 2005 19:21:05 +0200, Vladimir Petrovic
<vladap at criticalpublics.com> wrote:
> On Tuesday 15 February 2005 17:30, Chris Jackson wrote:
> > One side suggestion would also be to use req.form , like so:
> >
> > my_list_of_special_field_names = ['special1', 'special2', 'special3']
> > for special in my_list_of_special_field_names:
> >     if special in req.form:
> >         return apache.HTTP_FORBIDDEN
> >
> > req.form holds all fields whether it's from POST or GET.
> >
> 
> thanks for the tip, but it seems that field "form" in not defined inside the
> request object at this stage (and it is not mentioned in the documentation
> (http://www.modpython.org/live/current/doc-html/pyapi-mprequest-mem.html)
> 
> Documentation mentions "form" is created inside request object only for the
> publisher handler. But I just want to check the form and then pass it by
> rewrite rule to mod_proxy, and it seems to me that publish handler can't
> acomplish that. I could create a publish handler and the use urllib to make
> actual request (instead of mod_proxy), but that doesn't look too nice and
> simple.
> 
> Vladimir
> 
>