There are a few locations where XenForo directly accesses
$_POST/$_GET
:- \XF\Spam\AbstractChecker::logSpamTrigger()
- \XF\Payment\PayPal::setupCallback()
- \XF\Payment\TwoCheckout::getLogData()
- \XF\Http\Error::getRequestDataForExceptionLog()
- \XF\Mvc\Controller::assertValidPage()
- \XF\Pub\Controller\Report::actionClosed()
XF\Http\Request
instead.
Upvote
0