Changes between Version 203 and Version 204 of BackwardsIncompatibleChanges

Timestamp:

Aug 3, 2008, 3:01:57 PM (16 years ago)

Author:

Gary Wilson

Comment:

note about [8202]

BackwardsIncompatibleChanges

@@ -72 +72 @@
  * [8162] July 30, 2008 [#Passwordresetsystemchangedtoimprovesecurityandusability  Password reset system changed to improve security and usability ]
  * [8191] Aug. 1, 2008 [#Removedseveraldeprecatedfeaturesfor1.0 Removed several deprecated features for 1.0]
+ * [8202] Aug. 3, 2008 [#Removeddictionaryaccesstorequestobject Removed dictionary access to request object]
 
 == Database constraint names changed ==
@@ -1062 +1063 @@
  * The `QOperator`, `QNot`, `QAnd` and `QOr` classes were removed, use the [http://www.djangoproject.com/documentation/db-api/#complex-lookups-with-q-objects Q class] instead.
  * The `maxlength` argument for model fields was removed, use `max_length` instead.
+
+== Removed dictionary access to request object  ==
+
+In [8202], removed dictionary access to request object to avoid its attributes from being overridden in templates by GET and POST data.  Instead, you should use `reqest.REQUEST` for the same functionality:
+ * `request[key]` -> `request.REQUEST[key]`
+ * `key in request` -> `key in request.REQUEST`
+ * `request.has_key(key)` -> `request.REQUEST.has_key(key)`
+