diff options
| author | Eric Barnes <eric@ericlbarnes.com> | 2011-04-27 05:02:44 +0200 |
|---|---|---|
| committer | Eric Barnes <eric@ericlbarnes.com> | 2011-04-27 05:02:44 +0200 |
| commit | 25d495b4a2598f771a858108a2cd2e96f0130412 (patch) | |
| tree | b134c1c1b11e5a02840bb7e9406ab75a077cf25e | |
| parent | 32dbac2695490fb751fc8da645bba945bc8da718 (diff) | |
Removed the GET, POST, and COOKIE Data from security since we now allow $_GET data. Fixes #48
| -rw-r--r-- | user_guide/general/security.html | 8 |
1 files changed, 1 insertions, 7 deletions
diff --git a/user_guide/general/security.html b/user_guide/general/security.html index bcbb36c6f..31dd7978c 100644 --- a/user_guide/general/security.html +++ b/user_guide/general/security.html @@ -76,15 +76,9 @@ minimize the possibility that malicious data can be passed to your application. <li>Dash: -</li> </ul> -<h2>GET, POST, and COOKIE Data</h2> - -<p>GET data is simply disallowed by CodeIgniter since the system utilizes URI segments rather than traditional URL query strings (unless -you have the query string option enabled in your config file). The global GET -array is <strong>unset</strong> by the Input class during system initialization.</p> - <h2>Register_globals</h2> -<p>During system initialization all global variables are unset, except those found in the $_POST and $_COOKIE arrays. The unsetting +<p>During system initialization all global variables are unset, except those found in the $_GET, $_POST, and $_COOKIE arrays. The unsetting routine is effectively the same as register_globals = off.</p> <a name="error_reporting"></a> |