If, for whatever reason, Sanitize::_stopToken() is called, the variables $_POST and $_GET become unset().
No argument there.
But, because CubeCart continues to process and build the page content, any innocuous function, for example currentPage(), that wants to use $_GET after that point will cause PHP to complain.
Maybe after the unset() (just to make sure the payloads are killed), set them to an empty array.
If, for whatever reason,
Sanitize::_stopToken()is called, the variables$_POSTand$_GETbecomeunset().No argument there.
But, because CubeCart continues to process and build the page content, any innocuous function, for example
currentPage(), that wants to use$_GETafter that point will cause PHP to complain.Maybe after the
unset()(just to make sure the payloads are killed), set them to an empty array.What about
$_REQUEST?