Re: $_POST vs $_REQUEST
| From: | Richard | Date: | Tue, 23 Feb 2010 09:19:33 +0000 |
| Subject: | Re: $_POST vs $_REQUEST | ||
| References: | 1 2 3 4 5 6 7 8 9 10 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-302299@lists.php.net to get a copy of this message | ||
Hi,
Well people better than me (how is that possible?!) have said that
$_REQUEST has the potential to open your app up to security
vulnerabilities, and that it should be avoided because of that. Here's
a post from Stephan Esser about it on the PHP-Internals list:
http://www.mail-archive.com/internals@lists.php.net/msg32832.html
Stephan heads up the Hardened-PHP project and when it comes to
security, I don't know of anyone better. So, if he advises not to use
_REQUEST, it's a good idea to follow that advice.
--
Richard Heyes