[wp-trac] Re: [WordPress Trac] #8814: Bad use of $_REQUEST variable in wordpress

[WordPress Trac]

#8814: Bad use of $_REQUEST variable in wordpress
--------------------------+-------------------------------------------------
 Reporter:  firstbit      |       Owner:  ryan                                
     Type:  defect (bug)  |      Status:  new                                 
 Priority:  normal        |   Milestone:  2.8                                 
Component:  Security      |     Version:  2.8                                 
 Severity:  normal        |    Keywords:  has-patch needs-testing dev-feedback
--------------------------+-------------------------------------------------

Comment(by Denis-de-Bernardy):

 Replying to [comment:8 wet]:
 > I'm wondering what's this snippet supposed to accomplish:
 >
 > {{{
 > +        if ( ini_get('variables_order', 'EGPS') )
 > +                return;
 > }}}
 >

 if the variables_order is set to EGPS, then we're good already -- cookies
 are not passed into the REQUEST variable.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/8814#comment:9>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software