Re: Capturing a sql query
| From: | Joseph Crawford | Date: | Wed, 29 Sep 2004 17:34:54 +0000 |
| Subject: | Re: Capturing a sql query | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-36446@lists.php.net to get a copy of this message | ||
i am sorry but i would never post a querystring along with a form i
mean doing that and processing it will open your site to
vulnerabilities.
yes you could do it as a post variable and a hidden field but that
doesnt stop people from saving the html document to thier computer
altering the query and then submitting the form, i guess you could add
a check to make sure that the refering page is yourdomain.com but if i
am correct this could open up a world of trouble.
If however i am wrong someone please respond and correct me :)
--
Joseph Crawford Jr.
Codebowl Solutions
codebowl@gmail.com
802-558-5247
For a GMail account
contact me OFF-LIST