1
vote
1answer
132 views
+50

Is PHP array injection (web parameter key tampering) impossible without knowing the parameter keys and with mod_rewrite enabled?

In other words: Does the use of mod_rewrite make PHP array injection (web parameter key tampering) impossible when the keys are unknown (and hard to guess)? Let's say we have the following URL: ...