Description:
------------
Changing filter.default with ini_set() at the script level does not appear to have the expected results. While it does properly change the setting, the output of filter_data() and input_get() when not specifying a filter uses the default filter as set in php.ini and not the one set with ini_set() at the script level.

This may be a design choice when outputting variables such as $_GET and $_POST, but when properly filtering on these variables, it still does not observe the new default filter as specified with ini_set().

In filter.c, this ini directive is properly set to PHP_INI_ALL, so I suspect the reason it's behaving this way with variables like $_GET['foo'] is because it's sanitizing them before the script starts executing. This is likely by design, and so that is fine. However, I did notice that even input_get() seems to be retaining the original filter.default rather than using the one set in the script. See below for an example.

Reproduce code:
---------------
Example URL:
http://example.org/test.php?foo=%3Cp%3EHello,%20World%3C/p%3E

<?php
var_dump(ini_get('filter.default'));
ini_set('filter.default', 'special_chars');
var_dump(ini_get('filter.default'));

var_dump($_GET['foo']);
var_dump(input_get(INPUT_GET, 'foo'));
var_dump(input_get(INPUT_GET, 'foo', FS_SPECIAL_CHARS));
?>

Expected result:
----------------
string(6) "string"
string(13) "special_chars"
string(12) "Hello, World"
string(35) "&#60;p&#62;Hello, World&#60;/p&#62;"
string(35) "&#60;p&#62;Hello, World&#60;/p&#62;"

- or even -

string(6) "string"
string(13) "special_chars"
string(35) "&#60;p&#62;Hello, World&#60;/p&#62;"
string(35) "&#60;p&#62;Hello, World&#60;/p&#62;"
string(35) "&#60;p&#62;Hello, World&#60;/p&#62;"

Actual result:
--------------
string(6) "string"
string(13) "special_chars"
string(12) "Hello, World"
string(12) "Hello, World"
string(35) "&#60;p&#62;Hello, World&#60;/p&#62;"