Re: [PATCH] Notice on array to string convertion
| From: | Marcel Esser | Date: | Thu, 02 Jun 2011 14:54:10 +0000 |
| Subject: | Re: [PATCH] Notice on array to string convertion | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-52782@lists.php.net to get a copy of this message | ||
You don't need a form to receive bad user input.
Also, I am not really inclined to write $v = isset($_POST['x']) ? (is_array($_POST['x']) ? 'something else that makes more sense' : $_POST['x'] ) : null; just to avoid catching a fatal.
- M.
On 6/2/2011 10:50 AM, Reindl Harald wrote:
Am 02.06.2011 16:24, schrieb Marcel Esser:I am not convinced that making this an error is a good idea. If I receive a $_GET/$_POST value that I expect to be a string value, but I actually received an array, this would mean I need to now explicitly check for it, since it will stop the runtime otherwise.so fix your code jesus christ what do you do if you expect a string and get an array? nothing useful! you can get this only by define name="multi[]" in a form and so if you define there post an array you should not expect a string in the code, this is exactly a sample where a fatal error should be thworn to force peopole not writing crappy code which floods my error-logs if anybody out there means to put a self-written script on our servers with E_ALL | E_STRICT which are running in this mode since years would this be an error the blind developers would see them even on their development-machines