Work at SourceForge, help us to make it a better place! We have an immediate need for a Support Technician in our San Francisco or Denver office.

Close

#97 replace $http_post_vars with $_request

XOOPS_2.0.x
open
nobody
Core (214)
5
2012-09-25
2004-08-09
greyhair
No

I have looked over the pros and cons and believe that
this change would not cause much additional headache.

In future core releases:
At a minimum: Would it be possible to change in the
./includes/checklogin.php all $http_post_vars with
$_request?
$_request has been available with php v 4.1.0

At a maximum: Globally change all $http_post... with
$_request.

IMHO: Looking only at the "post" does not necessarily
increase security.

Discussion