[UPHPU] receiving with $_REQUEST
Wade Preston Shearer
lists at wadeshearer.com
Thu Feb 28 12:28:24 MST 2008
It's obviously wise to only post a form using GET when you absolutely
need to or there are no security concerns involved, but what about on
the receiving end? Are there any reasons to not always receive with
$_REQUEST? I have heard people say that you should only use $_REQUEST
when you absolutely need to receive from both GET and POST, but if a
hacker can simulate a POST just as easy as GET then how is it insecure?
wade
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2425 bytes
Desc: not available
Url : http://uphpu.org/pipermail/uphpu/attachments/20080228/9719d026/smime.bin
More information about the UPHPU
mailing list