[ticket/12468] Having mbstring.http_input set to '' is as good as 'pass'...

....

https://tracker.phpbb.com/browse/PHPBB3-12468