Re: [PHP] $_POST vs $_REQUEST

[email protected] (Joseph Thayne)
Newsgroups php.general
Message-ID <[email protected]>

Richard wrote:
> It's a wise choice to go with $_POST, unless your form is a GET form,
> in which case use $_GET. $_REQUEST has the potential to open your
> script(s) up to security issues.
>
>   
I am not sure what the security issues are you are referring to as the 
$_REQUEST superglobal contains both $_GET and $_POST values.  Could you 
expound on that?  Thanks.
> Use quoted strings - either single or double quotes. Eg:
>
> $myArray['myKey']
> $myArray["myKey"]
>
>   
To answer your question though, the quotes will not protect you from SQL 
injection at all.  It simply has to do with processing the values.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.