#673: Request data is not cleaned for variables affected by register_argc_argv
or
register_long_arrays
----------------------+-----------------------------------------------------
Reporter: david | Owner: david
Type: defect | Status: new
Priority: high | Milestone: 0.11.1
Component: request | Version: 0.11.0
Severity: critical | Keywords:
Has_patch: 0 |
----------------------+-----------------------------------------------------
If {{{register_argc_argv}}} is on, then GET params are still in
{{{$_SERVER['argv']}}}.
Also, if {{{register_long_arrays}}} is on, then request data is still in
{{{$GLOBALS['HTTP_*_VARS]}}}, which are not references to {{{$_GET}}} etc.
--
Ticket URL: <http://trac.agavi.org/ticket/673>
Agavi <http://www.agavi.org/>
An MVC Framework for PHP5
_______________________________________________
Agavi Tickets Mailing List
[email protected]
http://lists.agavi.org/mailman/listinfo/tickets
