1.2.562. Incoming Variable Index Inventory¶
This rule collects all the index used in incoming variables : $_GET, $_POST, $_REQUEST, $_COOKIE.
Collecting together the names of incoming variable is good for documentation.
<?php
// x is collected
echo $_GET['x'];
// y is collected, but no z.
echo $_POST['y']['z'];
// s is not collected
echo $_ENV['s'];
?>
1.2.562.1. Connex PHP features¶
1.2.562.1.1. Specs¶
Short name |
Type/GPCIndex |
Rulesets |
|
Exakat since |
1.0.4 |
PHP Version |
All |
Severity |
|
Time To Fix |
|
Precision |
Very high |
Available in |