$_SERVER['SCRIPT_NAME']
SCRIPT_NAME solves all the problems mentioned?in this thread ?
?- it's just the script name, without any extra garbage?
that might be tacked on by the user. PHP_SELF explicitly includes that?
extra garbage, so solutions in this thread that involve stripping the?
garbage off of PHP_SELF to make it safe are really, really missing the?
point - just use SCRIPT_NAME instead. Please don't use FORM ACTION=”";?
according to the spec, what the browser does with that is undefined, so?
even if it works in current browsers, it might not work in future ones
SCRIPT_NAME解決本文提到的所有問題,它就是腳本的名字,沒有其他額外的垃圾信息(這些垃圾信息可以能被用戶提取)
PHP_SELF卻顯式的包含了這些信息
因此本文中涉及到剝離PHP_SELF這些信息以保安全的解決方法是非常非常····
用SCRIPT_NAME就是了。
別用<form action=''>
通過說明文檔,瀏覽器遇到這種情況該怎樣做是沒有說明的,即使在本機瀏覽器上成功了,但也許不能在另一個瀏覽器中工作
轉自:http://www.nyphp.org/list/talk-15339-serverphpself-not-working
轉載于:https://www.cnblogs.com/iLoveMyD/archive/2012/03/08/2385295.html
總結
以上是生活随笔為你收集整理的$_SERVER['SCRIPT_NAME']的全部內容,希望文章能夠幫你解決所遇到的問題。
- 上一篇: oracle 无法解析指定的连接标识符
- 下一篇: 计算机领域顶级会议