GET parameters and POST parameters should be treated the same. Becomes 
important 
depending on how apps operate. A common example are apps relying on $_REQUEST 
(this can contain GET or POST parameters) which is why it's really poor to use 
generic accessors that are not specific to the request type. So if it's worth 
doing for POST, it's worth doing for GET - no reason to assume either is safer 
than the other.

Paddy

 Pádraic Brady

http://blog.astrumfutura.com
http://www.survivethedeepend.com
OpenID Europe Foundation Irish Representative





________________________________
From: debussy007 <[email protected]>
To: [email protected]
Sent: Wed, June 30, 2010 10:15:09 AM
Subject: [fw-general] Zend_Filter_StripTags question


Hi,

I've always used Zend_Filter_StripTags to get the POST values from a form.
I was just wondering if it makes any sense to use it to get params (from the
url).
e.g. $lang = $this->_getParam('lang');
Could someone stick html or php code in a URL ...

Thank you!
-- 
View this message in context: 
http://zend-framework-community.634137.n4.nabble.com/Zend-Filter-StripTags-question-tp2272694p2272694.html

Sent from the Zend Framework mailing list archive at Nabble.com.

Reply via email to