[RSS Feed/News] Direct superglobal access

[XenForo]

There are a few locations where XenForo directly accesses $_POST/$_GET:

• \XF\Spam\AbstractChecker::logSpamTrigger()
• \XF\Payment\PayPal::setupCallback()
• \XF\Payment\TwoCheckout::getLogData()
• \XF\Http\Error::getRequestDataForExceptionLog()
• \XF\Mvc\Controller::assertValidPage()
• \XF\Pub\Controller\Report::actionClosed()

This is problematic in integration scenarios, it would therefore be great if access could be routed through...

Read more

ادامه مطلب...