Doc #76637 [NEW]: Default $_REQUEST is Misrepresented in Documentation
From: dor dot tumarkin at checkmarx dot com
Operating system: Any
PHP version: 7.2.7
Package: Documentation problem
Bug Type: Documentation Problem
Bug description:Default $_REQUEST is Misrepresented in Documentation
Description:
------------
---
From manual page: http://www.php.net/reserved.variables.request
---
Documentation states the $_REQUEST is "An associative array that by
default contains the contents of $_GET, $_POST and $_COOKIE."
In PHP 7.2.7 (and likely several versions lower), $_COOKIE is not part
of $_REQUEST by default, though it could be re-enabled via php.ini. The
default behavior is to only include $_GET and $_POST in request_order
"due to security concerns", likely because adding C for $_COOKIES
enables a wider breadth for value shadowing attacks.
Test script:
---------------
Not applicable.
--
Edit bug report at https://bugs.php.net/bug.php?id=76637&edit=1
--
Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=76637&r=trysnapshot54
Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=76637&r=trysnapshot55
Try a snapshot (trunk): https://bugs.php.net/fix.php?id=76637&r=trysnapshottrunk
Fixed in SVN: https://bugs.php.net/fix.php?id=76637&r=fixed
Fixed in release: https://bugs.php.net/fix.php?id=76637&r=alreadyfixed
Need backtrace: https://bugs.php.net/fix.php?id=76637&r=needtrace
Need Reproduce Script: https://bugs.php.net/fix.php?id=76637&r=needscript
Try newer version: https://bugs.php.net/fix.php?id=76637&r=oldversion
Not developer issue: https://bugs.php.net/fix.php?id=76637&r=support
Expected behavior: https://bugs.php.net/fix.php?id=76637&r=notwrong
Not enough info: https://bugs.php.net/fix.php?id=76637&r=notenoughinfo
Submitted twice: https://bugs.php.net/fix.php?id=76637&r=submittedtwice
register_globals: https://bugs.php.net/fix.php?id=76637&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=76637&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=76637&r=dst
IIS Stability: https://bugs.php.net/fix.php?id=76637&r=isapi
Install GNU Sed: https://bugs.php.net/fix.php?id=76637&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=76637&r=float
No Zend Extensions: https://bugs.php.net/fix.php?id=76637&r=nozend
MySQL Configuration Error: https://bugs.php.net/fix.php?id=76637&r=mysqlcfg
Thread (3 messages)
- dor dot tumarkin at checkmarx dot com