- Core Components
- HTTP requests and responses are encapsulated in immutable Nette\Http\Request and Response objects
- Framework requires PHP 8.1 and supports PHP 8.4
- Requests are automatically sanitized from control characters and invalid UTF-8 sequences
- Request Management
- RequestFactory creates current HTTP request object
- Request objects have methods for URL, query parameters, cookies, and headers
- Response objects are mutable with setters for headers and status codes
- File Uploads
- FileUpload objects encapsulate form input data
- Files are returned in normalized tree structure
- Methods available for hasFile(), isOk(), getContents(), and getError()
- Sessions
- Sessions use unique session IDs stored in cookies
- Data is divided into sections for better organization
- Sessions can have expiration times and custom configuration
- Security Features
- Session ID transfer restricted to cookies and JavaScript
- Framework generates new IDs for login
- URL components are sanitized and protected from malicious characters