Add `sudo()` to call `get_param` where necessary, and make the web client use a controller instead of directly accessing parameters.
Add `sudo()` to call `get_param` where necessary, and make the web client use a controller instead of directly accessing parameters.