There are a few locations where XenForo directly accesses
$_POST/$_GET:- \XF\Spam\AbstractChecker::logSpamTrigger()
- \XF\Payment\PayPal::setupCallback()
- \XF\Payment\TwoCheckout::getLogData()
- \XF\Http\Error::getRequestDataForExceptionLog()
- \XF\Mvc\Controller::assertValidPage()
- \XF\Pub\Controller\Report::actionClosed()
XF\Http\Request instead.
Upvote
0