question for the coders and team members.

[Bushmaster]

I came across an addon that want you to find.

[size="2"]if (isset($_POST['products_image']) && tep_not_null($_POST['products_image']) && ($_POST['products_image'] != 'none')) { 
$sql_data_array['products_image'] = tep_db_prepare_input($_POST['products_image']);

}

[/size]

 

What I found was this line.

if (isset($HTTP_POST_VARS['products_image']) && tep_not_null($HTTP_POST_VARS['products_image']) && ($HTTP_POST_VARS['products_image'] != 'none')) {
		$sql_data_array['products_image'] = tep_db_prepare_input($HTTP_POST_VARS['products_image']);
	  }

 

So off to Google I went and found out that $HTTP_POST_VARS was deprecated for $_POST. Will osC break if you switch these when found? And will it matter if both are used?

[Jack_mcs]

$_POST is the preferred usage. The code will still work if they are mixed.

 

Jack

[Bushmaster]

Thanks Jack. Do you know if it was security related or just to save 9 key strokes every time you had to type it. :lol:

[Jack_mcs]

$_POST is more secure.

 

Jack