RE: [PHP] $_POST vs $_REQUEST
| From: | David Murphy | Date: | Mon, 22 Feb 2010 21:30:04 +0000 |
| Subject: | RE: [PHP] $_POST vs $_REQUEST | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-302268@lists.php.net to get a copy of this message | ||
Richard,
The use of $_REQUEST it no more a security hole than $_GET or $_REQUEST,
they should ALL be treats as bad data until normalized and sanitized. The
claim that it opens a security hole is just false, thats like saying PHP
is insecure, its not it just allows for lazy coding such as $_REQUEST.
David Murphy
-----Original Message-----
From: richard.heyes@gmail.com [mailto:richard.heyes@gmail.com] On Behalf Of
Richard
Sent: Monday, February 22, 2010 3:03 PM
To: Joseph Thayne
Cc: Slack-Moehrle; php-general
Subject: Re: [PHP] $_POST vs $_REQUEST
Hi,
> I am not sure what the security issues are you are referring to as the
> $_REQUEST superglobal contains both $_GET and $_POST values. Could you
> expound on that? Thanks.
Not really, do a search.
--
Richard Heyes
HTML5 canvas graphing: RGraph - http://www.rgraph.net (updated
20th
February)
Lots of PHP and Javascript code - http://www.phpguru.org
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php