3 ms·
I don't think the request object can be modified by the end user or that it is modified by the server at that point. If my belief is correct, does this code sti
by keen_poincare 3y ago
I don't think the request object can be modified by the end user or that it is modified by the server at that point. If my belief is correct, does this code still contain TOCTOU bugs?
- VWWHFSfQ 3y agoIt's the underlying state of the database that will change between these different checks. Not the end-user modifying the request object, which is in PHP memory
- keen_poincare 3y agoThanks for explaining it.