security - Output buffer vulnerabilities PHP -


What is the vulnerability of the output buffer function in PHP?

  • It is not saying that it is weaknesses, only by thinking that anyone

    is considered to be ugly php code?

    • As part of separating layout

      output Buffering is supposed to be ugly if it is used to stumble the 'old', then the can not send the header, the production has already started ... Warning Output buffering is used for poor design.

      In a well-designed application, you will ensure that the titles of any reaction are sent before any reaction content, production buffering.

      In an application that has been made, a developer can decide to move to another headline somewhere, because the body's content has already been output. And since http headers should be sent before http body content, they use output buffering to deal with this violation of the http protocol. I have explained a few more earlier about this.

Comments