ajax call variables of VB

[squishi]

I have added a simple ajax call to the "onunload" event of a custom vbulletin page.
The custom page only contains the script with the ajax call and the header/navbar/footer of vbulletin.

			$.ajax({
				url: '/outro.php',
				async: false,
				cache: false,
				dataType: 'text',
				data: ({
					var1: '1',
					var2: '2'
					}),
				type: 'POST',
				success: function(data) {
					alert(data);
				}
			});

I checked the result with the following code in outro.php:

PHP Code:

chdir('../forum');
require_once('./global.php');

var_dump($_REQUEST);
die(); 


The result:

array(15) {
  ["var1"]=>
  string(1) "1"
  ["var2"]=>
  string(15) "2"
  ["ajax"]=>
  int(1)
  ["s"]=>
  &string(0) ""
  ["styleid"]=>
  &int(0)
  ["langid"]=>
  &int(0)
  ["referrerid"]=>
  &int(0)
  ["postid"]=>
  &int(0)
  ["threadid"]=>
  &int(0)
  ["forumid"]=>
  &int(0)
  ["pollid"]=>
  &int(0)
  ["a"]=>
  &string(0) ""
  ["mode"]=>
  &string(0) ""
  ["nojs"]=>
  &int(0)
  ["pagenumber"]=>
  &int(0)
}

There's all kinds of vbulletin variables that are added to this jquery ajax request! :down:
How can this be? Where do they come from? How can I turn this off?

Those additional ajax variables are totally unnecessary for my uses and will only slow things down.

[kh99]

I think they are added to $_REQUEST by including global.php. If you look at the top of global.php you'll see that those extra vars are all things that are "cleaned" by global.php. I think the cleaning code (which is in includes/class_core.php) sets those to ensure that any other code that uses them uses the "cleaned" values.

[squishi]

You are right. I thought all those variables were sent with the ajax request. But they are only added on teh server-side.