Bug #61497 [Com]: REQUEST_TIME_FLOAT and REQUEST_TIME are not accessible through filter_input

Edit report at https://bugs.php.net/bug.php?id=61497&edit=1 ID: 61497 Comment by: dasdaev9 at gmail dot com Reported by: phristen at yahoo dot com Summary: REQUEST_TIME_FLOAT and REQUEST_TIME are not accessible through filter_input Status: Open Type: Bug Package: Filter related Operating System: Windows 7 PHP Version: 5.4.0 Block user comment: N Private report: N New Comment: Find Home advisors are sharing latest news about home, real estate, home improvement, furniture, home advisor, design, decoration etc. More info to visit: (https://findhomeadvisors.com)github.com Previous Comments: ------------------------------------------------------------------------ [2018-03-10 14:11:24] cmb@php.net I fail to see why REQUEST_TIME(_FLOAT) should be filtered, since these are not user suppliable values. ------------------------------------------------------------------------ [2013-12-04 05:43:41] mcochris at gmail dot com Problem also exists in PHP version 5.5.5 on FreeBSD 9.2, Nginx 1.5.7, PHP-FPM. _SERVER["HOME"] and _SERVER["USER"] variables are also missing. Test: <?php echo var_export(array_diff_key($_SERVER, filter_input_array(INPUT_SERVER, FILTER_UNSAFE_RAW)), true); ?> should not return anything, but instead returns: <?php array ( 'HOME' => '/nonexistent', 'USER' => 'www', 'REQUEST_TIME_FLOAT' => 1386135028.8222, 'REQUEST_TIME' => 1386135028, ) ?> Same problem when using "filter_input" function, e.g. <?php filter_input(INPUT_SERVER, 'REQUEST_TIME',... ?> The filter type doesn't seem to matter - same problem with FILTER_SANITIZE_FULL_SPECIAL_CHARS ------------------------------------------------------------------------ [2013-11-13 18:56:47] avaer at avaer dot net Encountered this bug on Arch Linux with PHP 5.5.5 and Apache 2.2. It also affects PHP_AUTH_USER and PHP_AUTH_PW - they are also inaccessible (should I report this as another bug?) ------------------------------------------------------------------------ [2012-03-24 16:59:12] phristen at yahoo dot com Description: ------------ REQUEST_TIME_FLOAT and REQUEST_TIME are not accessible through filter_input... That is pretty self-explanatory. Running this on Windows 7 + Apache 2.4, but it would be nice if somebody could check other platforms. Test script: --------------- foreach ($_SERVER as $i => $x) { if (!filter_has_var(INPUT_SERVER, $i)) { echo $i."\n"; } } Expected result: ---------------- (no output) Actual result: -------------- REQUEST_TIME_FLOAT REQUEST_TIME ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=61497&edit=1