[UPHPU] receiving with $_REQUEST

Wade Preston Shearer lists at wadeshearer.com
Thu Feb 28 12:28:24 MST 2008


It's obviously wise to only post a form using GET when you absolutely  
need to or there are no security concerns involved, but what about on  
the receiving end? Are there any reasons to not always receive with  
$_REQUEST? I have heard people say that you should only use $_REQUEST  
when you absolutely need to receive from both GET and POST, but if a  
hacker can simulate a POST just as easy as GET then how is it insecure?


wade
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2425 bytes
Desc: not available
Url : http://uphpu.org/pipermail/uphpu/attachments/20080228/9719d026/smime.bin


More information about the UPHPU mailing list