From 1bb94aecc6bf60c02307d40c2f3a8766083fa27e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pierre=20Mazi=C3=A8re?= <pierre.maziere@gmx.com>
Date: Thu, 25 Aug 2016 01:07:49 +0200
Subject: [PATCH] [core] leave $_REQUEST alone
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Pierre Mazière <pierre.maziere@gmx.com>
---
 index.php | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/index.php b/index.php
index 25f5b549..e3071341 100644
--- a/index.php
+++ b/index.php
@@ -94,8 +94,6 @@ try{
     $action=filter_input(INPUT_GET,'action');
     $bridge=filter_input(INPUT_GET,'bridge');
     if($action === 'display' && !empty($bridge)){
-      unset($_REQUEST['action']);
-      unset($_REQUEST['bridge']);
       // DEPRECATED: 'nameBridge' scheme is replaced by 'name' in bridge parameter values
       //             this is to keep compatibility until futher complete removal
       if(($pos=strpos($bridge,'Bridge'))===(strlen($bridge)-strlen('Bridge'))){
@@ -103,7 +101,6 @@ try{
       }
 
       $format = filter_input(INPUT_GET,'format');
-      unset($_REQUEST['format']);
       // DEPRECATED: 'nameFormat' scheme is replaced by 'name' in format parameter values
       //             this is to keep compatibility until futher complete removal
       if(($pos=strpos($format,'Format'))===(strlen($format)-strlen('Format'))){
@@ -130,7 +127,12 @@ try{
                       $bridge->useProxy=false;
                     }
 					$bridge->loadMetadatas();
-                    $bridge->setDatas($_REQUEST);
+                    $params=$_REQUEST;
+                    unset($params['action']);
+                    unset($params['bridge']);
+                    unset($params['format']);
+                    unset($params['_noproxy']);
+                    $bridge->setDatas($params);
                     // Data transformation
                     try {
 		                $format = Format::create($format);