php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Doc Bug #7611 setting of $HTTP_POST_VARS when no post was sent
Submitted: 2000-11-03 04:15 UTC Modified: 2001-01-22 21:37 UTC
From: tkruthoff at absolutebackgrounds dot com Assigned:
Status: Closed Package: Documentation problem
PHP Version: 4.0.3pl1 OS: linux
Private report: No CVE-ID: None
View Add Comment Developer Edit
 [2000-11-03 04:15 UTC] tkruthoff at absolutebackgrounds dot com 
After upgrading to 4.0.3pl1 from 4.0.0 isset($HTTP_POST_VARS) returns TRUE even if no post data was sent IE GET, etc.  Is this intended?

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-11-03 08:27 UTC] zeev@php.net 
Yes, it is intended (in order to prevent remote users from injecting information into HTTP_POST_VARS)
 [2000-11-03 13:10 UTC] waldschrott@php.net 
Has this change found its way to the docs? I?m not sure...
 [2001-01-22 21:37 UTC] jimw@php.net 
added a note to the docs.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Fri Apr 26 18:01:31 2024 UTC