Your Open Source

Free YourOpenSource Softwares Online Resources and Softwares Downloads with Demo

PHP

Security:: $_REQUEST and $_SERVER

$_REQUEST

The $_REQUEST super-global merges data from
different input methods, like register_globals it
is vulnerable to value collisions.
PHP.ini: variables_order = GPCS

echo $_GET['id']; // 1

echo $_COOKIE['id']; // 2

echo $_REQUEST['id']; // 2

$_SERVER

User may inject data via headers Host: <script> ...
Some parameters contain data based on user input
REQUEST_URI, PATH_INFO, QUERY_STRING
Can be fakes
Spoofed IP address via the use of anonymous proxies