search
HomeBackend DevelopmentPHP Tutorialphp 地址栏没有变量,为什么会被$_request到

<code>if($_REQUEST['facebook_type'] == 'facebook'){       //彈出facebook彈窗
    $smarty->assign('facebook_type','facebook');
}


    $$(function(){
   {if $facebook_type eq 'facebook'}
    openBg_login(".facebook_register_box");//登录facebook弹窗
  {/if}
})

一个用户使用facebook登录,链接会出现        ?facebook_type=facebook
然后在其他电脑打开网址,地址栏中没有出现    ?facebook_type=facebook,但是却弹窗了,为什么会弹窗?

当没有人登录的时候,就不会弹出,只要有一个用户用facebook登录了,其他用户在其他电脑打开页面就会默认弹出这个登录弹窗了,为什么地址栏中没有facebook_type还是进入了if语句完成了smarty的赋值?</code>

回复内容:

<code>if($_REQUEST['facebook_type'] == 'facebook'){       //彈出facebook彈窗
    $smarty->assign('facebook_type','facebook');
}


    $$(function(){
   {if $facebook_type eq 'facebook'}
    openBg_login(".facebook_register_box");//登录facebook弹窗
  {/if}
})

一个用户使用facebook登录,链接会出现        ?facebook_type=facebook
然后在其他电脑打开网址,地址栏中没有出现    ?facebook_type=facebook,但是却弹窗了,为什么会弹窗?

当没有人登录的时候,就不会弹出,只要有一个用户用facebook登录了,其他用户在其他电脑打开页面就会默认弹出这个登录弹窗了,为什么地址栏中没有facebook_type还是进入了if语句完成了smarty的赋值?</code>

地址栏有变量是get,地址栏没变量放数据包当payload的post,request是get和post都接

应该是post方式提交的请求,抓包看下就明白了

先查post,如果post里没就是我说的
$_REQUEST这玩意居然把cookie都接过去!不止get和post

<code>$_REQUEST 默认情况下包含了 $_GET,$_POST 和 $_COOKIE 的数组。
以命令行方式运行时,将不包含 argv 和 argc 信息;它们将存在于 $_SERVER 数组。</code>

看看$_REQUEST,接受哪些类型啊

这个变量接受的是请求中的参数,包括通过 get, post 和 cookie 中的数据,如果是 post 或 cookie 中的参数,那么 URL 中肯定没有体现出来。

Statement
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
What data can be stored in a PHP session?What data can be stored in a PHP session?May 02, 2025 am 12:17 AM

PHPsessionscanstorestrings,numbers,arrays,andobjects.1.Strings:textdatalikeusernames.2.Numbers:integersorfloatsforcounters.3.Arrays:listslikeshoppingcarts.4.Objects:complexstructuresthatareserialized.

How do you start a PHP session?How do you start a PHP session?May 02, 2025 am 12:16 AM

TostartaPHPsession,usesession_start()atthescript'sbeginning.1)Placeitbeforeanyoutputtosetthesessioncookie.2)Usesessionsforuserdatalikeloginstatusorshoppingcarts.3)RegeneratesessionIDstopreventfixationattacks.4)Considerusingadatabaseforsessionstoragei

What is session regeneration, and how does it improve security?What is session regeneration, and how does it improve security?May 02, 2025 am 12:15 AM

Session regeneration refers to generating a new session ID and invalidating the old ID when the user performs sensitive operations in case of session fixed attacks. The implementation steps include: 1. Detect sensitive operations, 2. Generate new session ID, 3. Destroy old session ID, 4. Update user-side session information.

What are some performance considerations when using PHP sessions?What are some performance considerations when using PHP sessions?May 02, 2025 am 12:11 AM

PHP sessions have a significant impact on application performance. Optimization methods include: 1. Use a database to store session data to improve response speed; 2. Reduce the use of session data and only store necessary information; 3. Use a non-blocking session processor to improve concurrency capabilities; 4. Adjust the session expiration time to balance user experience and server burden; 5. Use persistent sessions to reduce the number of data read and write times.

How do PHP sessions differ from cookies?How do PHP sessions differ from cookies?May 02, 2025 am 12:03 AM

PHPsessionsareserver-side,whilecookiesareclient-side.1)Sessionsstoredataontheserver,aremoresecure,andhandlelargerdata.2)Cookiesstoredataontheclient,arelesssecure,andlimitedinsize.Usesessionsforsensitivedataandcookiesfornon-sensitive,client-sidedata.

How does PHP identify a user's session?How does PHP identify a user's session?May 01, 2025 am 12:23 AM

PHPidentifiesauser'ssessionusingsessioncookiesandsessionIDs.1)Whensession_start()iscalled,PHPgeneratesauniquesessionIDstoredinacookienamedPHPSESSIDontheuser'sbrowser.2)ThisIDallowsPHPtoretrievesessiondatafromtheserver.

What are some best practices for securing PHP sessions?What are some best practices for securing PHP sessions?May 01, 2025 am 12:22 AM

The security of PHP sessions can be achieved through the following measures: 1. Use session_regenerate_id() to regenerate the session ID when the user logs in or is an important operation. 2. Encrypt the transmission session ID through the HTTPS protocol. 3. Use session_save_path() to specify the secure directory to store session data and set permissions correctly.

Where are PHP session files stored by default?Where are PHP session files stored by default?May 01, 2025 am 12:15 AM

PHPsessionfilesarestoredinthedirectoryspecifiedbysession.save_path,typically/tmponUnix-likesystemsorC:\Windows\TemponWindows.Tocustomizethis:1)Usesession_save_path()tosetacustomdirectory,ensuringit'swritable;2)Verifythecustomdirectoryexistsandiswrita

See all articles

Hot AI Tools

Undresser.AI Undress

Undresser.AI Undress

AI-powered app for creating realistic nude photos

AI Clothes Remover

AI Clothes Remover

Online AI tool for removing clothes from photos.

Undress AI Tool

Undress AI Tool

Undress images for free

Clothoff.io

Clothoff.io

AI clothes remover

Video Face Swap

Video Face Swap

Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Tools

Dreamweaver Mac version

Dreamweaver Mac version

Visual web development tools

WebStorm Mac version

WebStorm Mac version

Useful JavaScript development tools

MinGW - Minimalist GNU for Windows

MinGW - Minimalist GNU for Windows

This project is in the process of being migrated to osdn.net/projects/mingw, you can continue to follow us there. MinGW: A native Windows port of the GNU Compiler Collection (GCC), freely distributable import libraries and header files for building native Windows applications; includes extensions to the MSVC runtime to support C99 functionality. All MinGW software can run on 64-bit Windows platforms.

EditPlus Chinese cracked version

EditPlus Chinese cracked version

Small size, syntax highlighting, does not support code prompt function

SAP NetWeaver Server Adapter for Eclipse

SAP NetWeaver Server Adapter for Eclipse

Integrate Eclipse with SAP NetWeaver application server.