Re: U
| From: | Stefan Esser | Date: | Sun, 06 Jan 2008 10:06:19 +0000 |
| Subject: | Re: U | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-34521@lists.php.net to get a copy of this message | ||
Hello Daniel,
> It may be off-topic for the initial post, but I disagree
> wholeheartedly with the above statement, Stefan. There are
> innumerable reasons where $_REQUEST would be much more economic than
> writing out all conditions for $_POST, $_GET, $_SESSION, $_COOKIE....
>
it doesn't matter if you disagree with my statement, because that is
just another personal opinion. It is a known fact that using $_REQUEST
usually introduces security holes in applications.
There is always $_COOKIE merged into it, which overwrites $_GET and
$_POST. That means I just need to infect your browser with a cookie and
have delayed cross site forgeries all over the place...
Stefan Esser