U
| From: | Stefan Esser | Date: | Sat, 05 Jan 2008 20:48:37 +0000 |
| Subject: | U | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-34507@lists.php.net to get a copy of this message | ||
Hello,
>> typing into PHP, even if it is optional. Passing $_REQUEST['age'] to a
>>
> that $_REQUEST['age'] has been checked for numeric before the functio
would you please not use $_REQUEST in any of your examples? $_REQUEST is
one of the biggest design weaknesses in PHP. Every application using
$_REQUEST is most probably vulnerable to Delayed Cross Site Request
Forgery problems. (This basically means if e.g. a cookie named (age)
exists it will always overwrite the GET/POST content and therefore
unwanted requests will be performed)
And well... This thread continues without a single valid (!= personal
opinion) reason why type hinting should NOT be introduced. BTW accepting
the string '1' where an (int) type hint is placed would be the next
stupid design decision.
Yours,
Stefan Esser