标签: security mongodb post get
是否足以使用字符串覆盖$ _POST ['xxx']和$ _GET ['xxx']输入?
$ _POST ['xxx'] =(字符串)$ _ POST ['xxx'];