Oops, we need to untaint everything now. I wonder why.

[maypole.git] / lib / BeerDB.pm

diff --git a/lib/BeerDB.pm b/lib/BeerDB.pm
index a523561b4d4dfbe37e924f92ecbe13ab10b7221f..6080812172ded213e7872ba8fd5b0d3ccc885e6c 100644 (file)
--- a/lib/BeerDB.pm
+++ b/lib/BeerDB.pm
@@ -1,17 +1,27 @@
 package BeerDB;
 use base 'Apache::MVC';
-sub handler { Apache::MVC::handler("BeerDB", @_) }
+use Class::DBI::Loader::Relationship;
+# This line is required if you don't have Apache calling Perl handlers
+# as methods.
+sub handler { Apache::MVC::handler(__PACKAGE__, @_) }
+
+# This is the sample application. Change this to the path to your
+# database. (or use mysql or something)
+#BeerDB->set_database("dbi:SQLite:t/beerdb.db");
 BeerDB->set_database("dbi:mysql:beerdb");
-BeerDB->config->{template_root} = "/opt/beer";
+# Change this to the root of the web space.
+#BeerDB->config->{uri_base} = "http://localhost/beerdb/";
 BeerDB->config->{uri_base} = "http://neo.trinity-house.org.uk/beerdb/";
+
+# Handpumps should not show up.
 BeerDB->config->{display_tables} = [qw[beer brewery pub style]];
 BeerDB::Brewery->untaint_columns( printable => [qw/name notes url/] );
+BeerDB::Style->untaint_columns( printable => [qw/name notes/] );
 BeerDB::Beer->untaint_columns(
     printable => [qw/abv name price notes/],
     integer => [qw/style brewery/],
     date =>[ qw/date/],
 );
-use Class::DBI::Loader::Relationship;
 BeerDB->config->{loader}->relationship($_) for (
     "a brewery produces beers",
     "a style defines beers",