Home >Backend Development >PHP Tutorial >Recommended settings for request_order in php.ini, requestorder_PHP tutorial
Recommended settings for request_order in php.ini, requestorder_PHP tutorial
- WBOYOriginal
- 2016-07-13 09:54:301020browse
Recommended settings for request_order in php.ini, requestorder
I just installed dede today, and the installation was completed with an error message (PHP 5.3 and above) Please set 'request_order' ini value to include C,G and P (recommended: 'CGP') in php.ini
dede provides a solution, change the request_order configuration option from the default
request_order = "GP"
changed to
request_order = "CGP"
Problem solved;
Regarding the request_order configuration option, it is newly added in version 5.3.x of PHP.
About his insecurity can be seen from:
The value of the super global variable $_REQUEST is affected by request_order in php.ini. In the latest php5.3.x series, the default value of request_order is GP, which means that under the default configuration, $_REQUEST only contains $_GET and $_POST without $_COOKIE. GLOBALS variables can be submitted through COOKIE.
This bypasses the global variable defense in most open source programs. So change the secondary option to request_order = "CGP"