Index: branches/5.2.x/core/units/users/users_tag_processor.php
===================================================================
diff -u -r16513 -r16804
--- branches/5.2.x/core/units/users/users_tag_processor.php	(.../users_tag_processor.php)	(revision 16513)
+++ branches/5.2.x/core/units/users/users_tag_processor.php	(.../users_tag_processor.php)	(revision 16804)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: users_tag_processor.php 16513 2017-01-20 14:10:53Z alex $
+* @version	$Id: users_tag_processor.php 16804 2024-10-20 18:20:11Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -195,7 +195,7 @@
 				return $items_info[USER_GUEST][ $params['field'] ];
 			}
 
-			$username = $this->Application->GetVar('save_username'); // from cookie
+			$username = $this->Application->GetVarDirect('save_username', 'Cookie');
 
 			if ($username == 'super-root') {
 				$username = 'root';
Index: branches/5.2.x/core/units/users/users_event_handler.php
===================================================================
diff -u -r16797 -r16804
--- branches/5.2.x/core/units/users/users_event_handler.php	(.../users_event_handler.php)	(revision 16797)
+++ branches/5.2.x/core/units/users/users_event_handler.php	(.../users_event_handler.php)	(revision 16804)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: users_event_handler.php 16797 2024-08-16 08:27:01Z alex $
+* @version	$Id: users_event_handler.php 16804 2024-10-20 18:20:11Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -309,7 +309,7 @@
 		 */
 		function OnAutoLoginUser($event)
 		{
-			$remember_login_cookie = $this->Application->GetVar('remember_login');
+			$remember_login_cookie = $this->Application->GetVarDirect('remember_login', 'Cookie');
 
 			if (!$remember_login_cookie || $this->Application->isAdmin || $this->Application->LoggedIn()) {
 				return ;
Index: branches/5.2.x/core/units/helpers/user_helper.php
===================================================================
diff -u -r16793 -r16804
--- branches/5.2.x/core/units/helpers/user_helper.php	(.../user_helper.php)	(revision 16793)
+++ branches/5.2.x/core/units/helpers/user_helper.php	(.../user_helper.php)	(revision 16804)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: user_helper.php 16793 2024-07-29 10:55:10Z alex $
+* @version	$Id: user_helper.php 16804 2024-10-20 18:20:11Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -49,10 +49,6 @@
 			if ( $this->Application->isAdmin ) {
 				$save_username = $this->Application->GetVar('cb_save_username') ? $username : '';
 				$this->Application->Session->SetCookie('save_username', $save_username, strtotime('+1 year'));
-
-				// cookie will be set on next refresh, but refresh won't occur if
-				// login error present, so duplicate cookie in kHTTPQuery
-				$this->Application->SetVar('save_username', $save_username);
 			}
 
 			// logging in "root" (admin only)
Index: branches/5.2.x/core/units/forms/form_submissions/form_submissions_eh.php
===================================================================
diff -u -r16513 -r16804
--- branches/5.2.x/core/units/forms/form_submissions/form_submissions_eh.php	(.../form_submissions_eh.php)	(revision 16513)
+++ branches/5.2.x/core/units/forms/form_submissions/form_submissions_eh.php	(.../form_submissions_eh.php)	(revision 16804)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: form_submissions_eh.php 16513 2017-01-20 14:10:53Z alex $
+* @version	$Id: form_submissions_eh.php 16804 2024-10-20 18:20:11Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -285,7 +285,7 @@
 			$object->SetDBField('IPAddress', $this->Application->getClientIp());
 
 			if ( !$object->GetDBField('ReferrerURL') ) {
-				$referrer = $this->Application->GetVar('original_referrer');
+				$referrer = $this->Application->GetVarDirect('original_referrer', 'Cookie');
 
 				if ( !$referrer ) {
 					$base_url = preg_quote($this->Application->BaseURL(), '/');
Index: branches/5.2.x/core/kernel/utility/http_query.php
===================================================================
diff -u -r16802 -r16804
--- branches/5.2.x/core/kernel/utility/http_query.php	(.../http_query.php)	(revision 16802)
+++ branches/5.2.x/core/kernel/utility/http_query.php	(.../http_query.php)	(revision 16804)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: http_query.php 16802 2024-10-20 18:05:05Z alex $
+* @version	$Id: http_query.php 16804 2024-10-20 18:20:11Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -105,7 +105,7 @@
 	 *
 	 * @throws RuntimeException When "Proxy" header is present in Web Request.
 	 */
-	public function __construct($order = 'CGPF')
+	public function __construct($order = 'GPF')
 	{
 		parent::__construct();
 
@@ -291,6 +291,10 @@
 					break;
 			}
 		}
+
+		if ( strpos($this->Order, 'C') === false ) {
+			$this->Cookie = $this->StripSlashes($_COOKIE);
+		}
 	}
 
 	/**
Index: branches/5.2.x/core/units/phrases/phrases_event_handler.php
===================================================================
diff -u -r16513 -r16804
--- branches/5.2.x/core/units/phrases/phrases_event_handler.php	(.../phrases_event_handler.php)	(revision 16513)
+++ branches/5.2.x/core/units/phrases/phrases_event_handler.php	(.../phrases_event_handler.php)	(revision 16804)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: phrases_event_handler.php 16513 2017-01-20 14:10:53Z alex $
+* @version	$Id: phrases_event_handler.php 16804 2024-10-20 18:20:11Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -218,7 +218,7 @@
 		 */
 		protected function _setPhraseModule(&$object)
 		{
-			$last_module = $this->Application->GetVar('last_module');
+			$last_module = $this->Application->GetVarDirect('last_module', 'Cookie');
 
 			if ( $last_module ) {
 				$object->SetDBField('Module', $last_module);
Index: branches/5.2.x/core/units/admin/admin_events_handler.php
===================================================================
diff -u -r16797 -r16804
--- branches/5.2.x/core/units/admin/admin_events_handler.php	(.../admin_events_handler.php)	(revision 16797)
+++ branches/5.2.x/core/units/admin/admin_events_handler.php	(.../admin_events_handler.php)	(revision 16804)
@@ -1,6 +1,6 @@
 <?php
 /**
-* @version	$Id: admin_events_handler.php 16797 2024-08-16 08:27:01Z alex $
+* @version	$Id: admin_events_handler.php 16804 2024-10-20 18:20:11Z alex $
 * @package	In-Portal
 * @copyright	Copyright (C) 1997 - 2009 Intechnic. All rights reserved.
 * @license      GNU/GPL
@@ -592,7 +592,6 @@
 
 		if ( $referrer && !preg_match('/^' . $base_url . '/', $referrer) ) {
 			$this->Application->Session->SetCookie('original_referrer', $referrer);
-			$this->Application->SetVar('original_referrer', $referrer);
 		}
 	}