note 57797 deleted from function.array-count-values by crell
| From: | crell@php.net | Date: | Tue, 12 Apr 2022 01:03:51 +0000 |
| Subject: | note 57797 deleted from function.array-count-values by crell | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-218174@lists.php.net to get a copy of this message | ||
Note Submitter: coda at bobandgeorge dot com
----
alwaysdrunk's comment only works if you can trust the client web browser. Using this function
doesn't validate that every necessary field exists -- only that every field that was submitted
has a value in it. Thus if an attacker wished to force a null value into one of the fields, he could
(rather easily) construct a modified form without the field and submit THAT.
Besides, you really ought to be validating each field anyway if you're taking user input.