Edit report at http://bugs.php.net/bug.php?id=53805&edit=1
ID: 53805 Updated by: [email protected] Reported by: it at x-trader dot cz Summary: filter_input_array ommits SERVER['REQUEST_TIME'] input Status: Open Type: Bug Package: Filter related Operating System: linux PHP Version: Irrelevant Block user comment: N Private report: N New Comment: REQUEST_TIME doesn't come from the user. It is added to the $_SERVER array after input filtering runs. Previous Comments: ------------------------------------------------------------------------ [2011-01-21 20:30:53] it at x-trader dot cz Description: ------------ Function filter_input_array does NOT return from SERVER input variable REQUEST_TIME key => value pair. Tested on Linux, PHP versions 5.2.8 and 5.3.2. May be it's undocumented feature or filter implementation failure, because filter functions are using only the original variable values passed to PHP. Test script: --------------- <?php var_dump(array_diff($_SERVER, filter_input_array(INPUT_SERVER, FILTER_UNSAFE_RAW))); Expected result: ---------------- array(0) { } Actual result: -------------- array(1) { 'REQUEST_TIME' => int(1295636581) } ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/bug.php?id=53805&edit=1
