Why should I use $_GET and $_POST instead of $_REQUEST? [duplicate]

by

I use $_REQUEST when I just want certain data from the user to return certain data.

Never use $_REQUEST when the request will have side effects. Requests that produce side effects should be POST (for semantic reasons, and also because of basic CSRF stuff, a false img tag can hit any GET endpoint without a user even knowing).

$_GET should be used when GETing or POSTing to a page will produce different results.

More Related Contents:

  1. How can I secure my source code [closed]
  2. Are PDO prepared statements sufficient to prevent SQL injection?
  3. Is “mysqli_real_escape_string” enough to avoid SQL injection or other SQL attacks?
  4. Why would one omit the close tag?
  5. How to secure database passwords in PHP?
  6. Reference: What is a perfect code sample using the MySQL extension? [closed]
  7. The ultimate clean/secure function
  8. How to encrypt/decrypt data in php?
  9. Exploitable PHP functions
  10. How do I use password hashing with PDO to make my code more secure? [closed]
  11. Preventing Directory Traversal in PHP but allowing paths
  12. Examples of SQL Injections through addslashes()?
  13. What is the best way to stop people hacking the PHP-based highscore table of a Flash game
  14. preventing csrf in php
  15. Generating cryptographically secure tokens
  16. Which $_SERVER variables are safe?
  17. How to best store user information and user login and password
  18. What do I need to store in the php session when user logged in?
  19. PHP setcookie “SameSite=Strict”?
  20. Magic quotes in PHP
  21. Is it ever ok to store password in plain text in a php variable or php constant?
  22. How do you set up use HttpOnly cookies in PHP
  23. Fastest hash for non-cryptographic uses?
  24. Detecting Ajax in PHP and making sure request was from my own website
  25. Best way to avoid code injection in PHP
  26. Is it secure to store a password in a session? [duplicate]
  27. What security problems could come from exposing phpinfo() to end users?
  28. Best way to connect to MySQL with PHP securely [duplicate]
  29. Safe alternatives to PHP Globals (Good Coding Practices)
  30. Single Session Login in Laravel

Leave a Comment