Re: Submitting form from <a href
| From: | Stut | Date: | Mon, 17 Jul 2006 14:46:18 +0000 |
| Subject: | Re: Submitting form from <a href | ||
| References: | 1 2 3 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-42218@lists.php.net to get a copy of this message | ||
Dave W wrote:
The problem with GET is that a user that looks at the source code of the html can easily just input what they want for the argument. Can you say SQL injection?Can you say input validation? Regardless of where user input comes from, whether it's in the URL, in POST vars or in cookies they should all be subjected to the same validation. Trust nothing. -Stut