Re: Waiting for localhost

From: Date: Mon, 16 Mar 2015 13:34:53 +0000
Subject: Re: Waiting for localhost
References: 1 2 3 4 5 6 7 8 9 10 11 12  Groups: php.db 
Request: Send a blank email to php-db+get-48986@lists.php.net to get a copy of this message
On 3/16/2015 12:02 AM, Ethan Rosenberg wrote:
I have this in the program -- echo "<form method= 'post' action='HandleWeight.php'>"; echo "<center><strong><input type = 'submit' value= 'WEIGH'></strong></center>"; echo "</form>"; I'm testing from a form, which previously worked perfectly - TIA Ethan
How does your script properly (note: 'properly') recognize that the user clicked on the 'Weigh' button? You don't have a name attribute on that submit element so you can't possibly check it. Consequently users could spoof your form to achieve something that you aren't planning on if that's any concern to you. PS - html does not use nor require spaces in its syntax. Your attributes are better written as: method='POST' than the way you are doing it. clicked on the 11

« previous php.db (#48986) next »