note 116934 added to reserved.variables.server

Be aware that it's a bad idea to access x-forwarded-for and similar headers through this array. The header names are mangled when populating the array and this mangling can introduce spoofing vulnerabilities. See http://en.wikipedia.org/wiki/User:Brion_VIBBER/Cool_Cat_incident_report for details of a real world exploit of this. ---- Server IP: 72.52.91.14 Probable Submitter: 151.227.216.54 ---- Manual Page -- http://php.net/manual/en/reserved.variables.server.php Edit -- https://master.php.net/note/edit/116934 Del: integrated -- https://master.php.net/note/delete/116934/integrated Del: useless -- https://master.php.net/note/delete/116934/useless Del: bad code -- https://master.php.net/note/delete/116934/bad+code Del: spam -- https://master.php.net/note/delete/116934/spam Del: non-english -- https://master.php.net/note/delete/116934/non-english Del: in docs -- https://master.php.net/note/delete/116934/in+docs Del: other reasons-- https://master.php.net/note/delete/116934 Reject -- https://master.php.net/note/reject/116934 Search -- https://master.php.net/manage/user-notes.php