On Thu, 7 Feb 2002, Simon Crute <[EMAIL PROTECTED]> wrote,
> Philip S Tellis wrote:
>
>
> > I think you're asking for associate => $cgi. Just make all your
> > settings to the $cgi object before you pass it.
>
> Ahh yes.
> Maybe I should read the docs again now I've started to understand what
> it's doing :-)
>
> One problem though, When using associate the query object has to exist.
> I'm initializing a bunch of tmpls at the beginning of the script (with
> cach=>1). Is there a way of deferring the evaluation of $q until the
> $tmpl->output is called instead of when new is called ?
Beware of using associate => $cgi. It will, as it's suppose to do,
automatically fill in the placeholder if the application doesn't do so
explicitly.
Imagine you have a template,
<title><tmpl_var title></title>
And you expect that title will be filled in from some textfield. But what
what happened if someone find out about the placeholder title in the
template and that you use associate? He can fill it in with what ever he
likes via query string.
http://www.host.com/yourscript?title=whatever+will+be
Just a thought,
--
san->http(www.trabas.com)
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
