Debug output of request data
Why it matters
Dumping request data can print passwords, tokens and internal structure to anyone who triggers the page.
var_dump($_POST);// Remove debug output before deploying.
// While debugging, log only what you need:
error_log('fields: ' . implode(',', array_keys($_POST)));How to fix
Remove var_dump/print_r of request data before deploying.
Scan my code
Scan my code β
Paste a file and PHP Safe points to every line that matches this rule.