note 119680 added to function.getenv

As noted on httpoxy.org, getenv() can confuse you in having you believe that all variables come from a "safe" environment (not all of them do). In particular, $_SERVER['HTTP_PROXY'] (or its equivalent getenv('HTTP_PROXY')) can be manually set in the HTTP request header, so it should not be considered safe in a CGI environment. In short, try to avoid using getenv('HTTP_PROXY') without properly filtering it. ---- Server IP: 72.52.91.14 Probable Submitter: 190.117.112.110 ---- Manual Page -- http://php.net/manual/en/function.getenv.php Edit -- https://master.php.net/note/edit/119680 Del: integrated -- https://master.php.net/note/delete/119680/integrated Del: useless -- https://master.php.net/note/delete/119680/useless Del: bad code -- https://master.php.net/note/delete/119680/bad+code Del: spam -- https://master.php.net/note/delete/119680/spam Del: non-english -- https://master.php.net/note/delete/119680/non-english Del: in docs -- https://master.php.net/note/delete/119680/in+docs Del: other reasons-- https://master.php.net/note/delete/119680 Reject -- https://master.php.net/note/reject/119680 Search -- https://master.php.net/manage/user-notes.php