Abhishek Das: Created page with "

Introduction

HTTP Request is user input. Many developers forget this fact and tend to rely on it as a trustworthy source and configure many aspects of their applicat..."

2013-07-29T16:57:34Z

Created page with "<h4>Introduction</h4> HTTP Request is user input. Many developers forget this fact and tend to rely on it as a trustworthy source and configure many aspects of their applicat..."

New page

<h4>Introduction</h4>

HTTP Request is user input. Many developers forget this fact and tend to rely on it as a trustworthy source and configure many aspects of their applications based on values of <code>$_SERVER</code> (most of which are set using HTTP request). While not all values under <code>$_SERVER</code> are unreliable, some of the values such as 'QUERY_STRING', 'HTTP_REFERRER' etc are entirely arbitrary information sent by the client. This library provides wrappers which securely process these data and hand them to user, and replaces the <code>$_SERVER</code> values that are insecure with objects that throw exceptions when cast to string (e.g. in HTTP_HOST), so that developers can no longer directly access them.

Phpsec/HTTP Request Handling Library - Revision history

Abhishek Das: Created page with "

Introduction