I wrote up a short piece of code for the Zend DevZone last night, and sent it to Cal Evans. This code was a basic bootstrap file that utilized Zend_Filter_Input and the Zend::registry methods to provide much safer access to user input while getting around scoping issues. This morning, after Cal looked it over, he told me something I'd not realized (as it's not mentioned in the 0.8.0 changelog, and the docs are still present on the main FW site): that Zend_Filter_Input has been removed entirely from the ZFW.
Clearly I'm late to the party on this, so I want to ask a few questions before formulating a full opinion on the issue. The mailing list archives gave me some ideas about the issues involved, but not a clear breakdown of the what and why.
1) Why exactly was Zend_Filter_Input dropped completely? My impression is that it was because some components that needed access to the superglobals data were not designed to support Zend_Filter_Input, and that Zend_Filter_Input didn't yet support things like iterative access.
2) Will a similar replacement component, one that forces developers to access user input via a filtering API, be included in the 1.0RC?
Thanks in advance,
--
Ed Finkler
Web and Security Archive Administrator
CERIAS - Purdue University
v: 765.496.6762 f: 765.496.3181
AIM: funkatronwork
ICQ: 301234029
