CSRF Token Problem in CI 4.5.3 ( BUG ??? )

Posted CFRS token value only exists with deprecated getVar method but not with getPost.

Debug $_POST and getPost() output there is no CFRS Token variable.

print_r($_POST) 
print_r($this->request->getPost())


Debug $_REQUEST and getVar() output there is CFRS Token variable.

print_r($_REQUEST) 
print_r($this->request->getVar())

In Codeigniter4 documentation I found a important message and warning message, so I should not use getVar method.
(https://codeigniter.com/user_guide/incom...tml#getvar)
Is it wrong in documentation?

I cannot use csrf_hash(), because it generate every time a new token.
So posted token can't be checked with.


Here are the messages from documentation.

Important
This method exists only for backward compatibility. Do not use it in new projects. Even if you are already using it, we recommend that you use another, more appropriate method.

Warning
If you want to validate POST data only, don’t use
getVar()
. Newer values override older values. POST values may be overridden by the cookies if they have the same name, and you set “C” after “P” in request-order.

> Is it wrong in documentation?

No. It is correct. getVar() is dangerous. Should not use.

If $_POST is empty, you may be already redirected.

ci-phpunit-test | CodeIgniter Testing Guide | CodeIgniter 3 to 4 Upgrade Helper