PHP 4.0 Bug #7611 Updated: setting of $HTTP_POST_VARS when no post was sent
| From: | jimw@php.net | Date: | Tue, 23 Jan 2001 02:37:39 +0000 |
| Subject: | PHP 4.0 Bug #7611 Updated: setting of $HTTP_POST_VARS when no post was sent | ||
| Groups: | php.dev | ||
| Request: | Send a blank email to php-dev+get-44781@lists.php.net to get a copy of this message | ||
ID: 7611
Updated by: jimw
Reported By: tkruthoff@absolutebackgrounds.com
Old-Status: Analyzed
Status: Closed
Bug Type: Documentation problem
Assigned To:
Comments:
added a note to the docs.
Previous Comments:
---------------------------------------------------------------------------
[2000-11-03 13:10:44] waldschrott@php.net
Has this change found its way to the docs? I´m not sure...
---------------------------------------------------------------------------
[2000-11-03 08:27:39] zeev@php.net
Yes, it is intended (in order to prevent remote users from injecting information into
HTTP_POST_VARS)
---------------------------------------------------------------------------
[2000-11-03 04:15:12] tkruthoff@absolutebackgrounds.com
After upgrading to 4.0.3pl1 from 4.0.0 isset($HTTP_POST_VARS) returns TRUE even if no post data was
sent IE GET, etc. Is this intended?
---------------------------------------------------------------------------
Full Bug description available at: http://bugs.php.net/?id=7611