NAME

HTTP::Body - HTTP Body Parser

SYNOPSIS

use HTTP::Body;

sub handler : method {
    my ( $class, $r ) = @_;

    my $content_type   = $r->headers_in->get('Content-Type');
    my $content_length = $r->headers_in->get('Content-Length');
    
    my $body   = HTTP::Body->new( $content_type, $content_length );
    my $length = $content_length;

    while ( $length ) {

        $r->read( my $buffer, ( $length < 8192 ) ? $length : 8192 );

        $length -= length($buffer);
        
        $body->add($buffer);
    }
    
    my $uploads     = $body->upload;     # hashref
    my $params      = $body->param;      # hashref
    my $param_order = $body->param_order # arrayref
    my $body        = $body->body;       # IO::Handle
}

DESCRIPTION

HTTP::Body parses chunks of HTTP POST data and supports application/octet-stream, application/json, application/x-www-form-urlencoded, and multipart/form-data.

Chunked bodies are supported by not passing a length value to new().

It is currently used by Catalyst, Dancer, Maypole, Web::Simple and Jedi.

NOTES

When parsing multipart bodies, temporary files are created to store any uploaded files. You must delete these temporary files yourself after processing them, or set $body->cleanup(1) to automatically delete them at DESTROY-time. The temporary file of a file part that is still incomplete at DESTROY-time is never returned by upload, so it is always deleted.

Limits

To stop hostile input from exhausting memory or CPU, add() enforces a few limits and croaks when one is exceeded. Each is a package variable you can raise to suit your forms, or set to 0 (or undef) to disable.

$HTTP::Body::MultiPart::max_parts
$HTTP::Body::UrlEncoded::max_params

The largest number of parts in a multipart body, and of fields in a urlencoded body (counted as & and ; separators, empty fields included); more make add croak. The default for both is 1000.

$HTTP::Body::MultiPart::max_header_size
$HTTP::Body::MultiPart::max_header_lines

The largest header block a multipart part may have, in bytes and in lines; a larger one makes add croak. The defaults are 32768 and 100.

METHODS

new

Constructor. Takes content type and content length as parameters, returns a HTTP::Body object.

add

Add string to internal buffer. Will call spin unless done. returns length before adding self.

body

accessor for the body.

chunked

Returns 1 if the request is chunked.

cleanup

Set to 1 to enable automatic deletion of temporary files at DESTROY-time.

content_length

Returns the content-length for the body data if known. Returns -1 if the request is chunked.

content_type

Returns the content-type of the body data.

init

return self.

length

Returns the total length of data we expect to read if known. In the case of a chunked request, returns the amount of data read so far.

trailing_headers

If a chunked request body had trailing headers, trailing_headers will return an HTTP::Headers object populated with those headers.

spin

Abstract method to spin the io handle.

state

Returns the current state of the parser.

param

Get/set body parameters.

upload

Get/set file uploads.

part_data

Just like 'param' but gives you a hash of the full data associated with the part in a multipart type POST/PUT. Example:

{
  data => "test",
  done => 1,
  headers => {
    "Content-Disposition" => "form-data; name=\"arg2\"",
    "Content-Type" => "text/plain"
  },
  name => "arg2",
  size => 4
}
tmpdir

Specify a different path for temporary files. Defaults to the system temporary path.

param_order

Returns the array ref of the param keys in the order how they appeared on the body

CONFIGURING UPLOAD TEMPORARY FILES

By default, the temporary file that holds an uploaded file is given the extension .upload instead of the extension of the uploaded file itself. The following package variables control how these temporary files are created.

$HTTP::Body::MultiPart::file_temp_suffix

The extension given to every multipart upload file; the default is .upload. Set it to undef to keep the extension of the uploaded file instead, as releases before 1.23 did.

$HTTP::Body::MultiPart::basename_regexp

The regexp used to work out the uploaded file's extension. It only matters when file_temp_suffix is undefined.

$HTTP::Body::MultiPart::file_temp_template

Passed through to the File::Temp TEMPLATE parameter. There is no special default in our module.

%HTTP::Body::MultiPart::file_temp_parameters

Extra settings for the File::Temp invocation. These override every other setting.

SUPPORT

Note: This project was formerly hosted on the Shadowcat Systems git server. The repository has moved to GitHub.

AUTHOR

Christian Hansen, christian.hansen@mac.com

Sebastian Riedel, kraihx@googlemail.com

Andy Grundman, andy@hybridized.org

MAINTAINER

Torsten Raudssus, torsten@raudssus.de

CONTRIBUTORS

Simon Elliott cpan@papercreatures.com

Kent Fredric kentnl@cpan.org

Christian Walde walde.christian@gmail.com

LICENSE

This library is free software. You can redistribute it and/or modify it under the same terms as perl itself.