3 ms·
Nope, PHP silently converts URL parameters into arrays (and if you don't expect this, than you can get a nasty NOSQL inject) http://www.php.net/manual/en/mongo
by mike_esspe 16y ago
Nope, PHP silently converts URL parameters into arrays (and if you don't expect this, than you can get a nasty NOSQL inject)
http://www.php.net/manual/en/mongo.security.php http://www.php.net/manual/en/mongo.security.php
- cheald 16y agoYeah, that's a problem in lots of languages/frameworks. Rack automatically parses URL parameters like that, too. The solution is to cast your parameters to a string before using them.