1
$_REQUEST['delete_me'];
Array (
[action] => test
[city_name] => Orlando
[delete_me] => -
);
我可以只是刪除它或將它設置爲$_REQUEST['delete_me'] = "";
做詭計?
$_REQUEST['delete_me'];
Array (
[action] => test
[city_name] => Orlando
[delete_me] => -
);
我可以只是刪除它或將它設置爲$_REQUEST['delete_me'] = "";
做詭計?
除了什麼halfdan said,你應該使用$_GET
或$_POST
或等效,除非你真的要求它是模糊的。
從$_REQUEST
取值可以使XSS更容易......當您希望POST值和惡意用戶將它們附加到查詢字符串時。
unset($_REQUEST['delete_me']);
有關unset的更多信息,請參閱PHP手冊。
你爲什麼要這麼做? – rojoca 2010-09-16 14:42:15