Re: When GET = POST?

["David Bullock" <davidbullock () tech-center com>]

----- Original Message -----
From: "Chris Thomas" <chris.thomas () lodoga co uk>


> Hi,
>
> This has been troubling me for  a while.
>
> When pen testing web apps where a page POSTs data it often seems just as
> effective (and easier) to encode the data in the URL (i.e. use and HTTP
> GET ). Is guess this is because many server-side languages do not
> differentiate how a variable is set?
>
> - How is this situation handled in common server side languages such
> PHP, etc?

Recent versions of PHP actually do place the GET and POST variables into two
different arrays, $_POST, and $_GET.

Older versions of PHP had the $HTTP_GET_VARS and $HTTP_POST_VARS arrays.

http://www.php.net/manual/en/language.variables.predefined.php