note 96035 added to function.parse-str

be careful using parse_str() without the [array &$arr] parameter, as this may override values of global and existing variables. <?php $var1 = 1; parse_str('var1=one&var2=two'); // $var1 is now 'one' ?> Also may lead to variable value injection when used with user input data: <?php $_POST['range'] = 'min=1&max=5&important_var=important_value_no_more'; $important_var = 'important_value'; parse_str($_POST['range']); ?> ---- Server IP: 69.147.83.197 Probable Submitter: 58.69.212.248 ---- Manual Page -- http://www.php.net/manual/en/function.parse-str.php Edit -- https://master.php.net/note/edit/96035 Del: integrated -- https://master.php.net/note/delete/96035/integrated Del: useless -- https://master.php.net/note/delete/96035/useless Del: bad code -- https://master.php.net/note/delete/96035/bad+code Del: spam -- https://master.php.net/note/delete/96035/spam Del: non-english -- https://master.php.net/note/delete/96035/non-english Del: in docs -- https://master.php.net/note/delete/96035/in+docs Del: other reasons-- https://master.php.net/note/delete/96035 Reject -- https://master.php.net/note/reject/96035 Search -- https://master.php.net/manage/user-notes.php