What are the potential issues with using $HTTP_GET_VARS and $HTTP_POST_VARS in PHP code?

Using $HTTP_GET_VARS and $HTTP_POST_VARS in PHP code is not recommended as they are deprecated since PHP 5.3.0 and removed in PHP 7.0.0. It is better to use the superglobals $_GET and $_POST instead to access GET and POST parameters securely. 

// Instead of using $HTTP_GET_VARS and $HTTP_POST_VARS, use $_GET and $_POST
$value = $_GET['parameter_name'];

Keywords

$HTTP_GET_VARS $HTTP_POST_VARS security vulnerabilities deprecated PHP 7

Related Questions