PHP 4.0 Bug #7611 Updated: setting of $HTTP_POST_VARS when no post was sent
| From: | waldschrott@php.net | Date: | Fri, 03 Nov 2000 18:10:44 +0000 |
| Subject: | PHP 4.0 Bug #7611 Updated: setting of $HTTP_POST_VARS when no post was sent | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-37000@lists.php.net to get a copy of this message | ||
ID: 7611
Updated by: waldschrott
Reported By: tkruthoff@absolutebackgrounds.com
Status: Analyzed
Bug Type: Documentation problem
Assigned To:
Comments:
Has this change found its way to the docs? I´m not sure...
Previous Comments:
---------------------------------------------------------------------------
[2000-11-03 08:27:39] zeev@php.net
Yes, it is intended (in order to prevent remote users from injecting information into
HTTP_POST_VARS)
---------------------------------------------------------------------------
[2000-11-03 04:15:12] tkruthoff@absolutebackgrounds.com
After upgrading to 4.0.3pl1 from 4.0.0 isset($HTTP_POST_VARS) returns TRUE even if no post data was
sent IE GET, etc. Is this intended?
---------------------------------------------------------------------------
Full Bug description available at: http://bugs.php.net/?id=7611