RE: [PHP] Confirm a Deletion
| From: | John W. Holmes | Date: | Tue, 01 Oct 2002 22:07:21 +0000 |
| Subject: | RE: [PHP] Confirm a Deletion | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-118450@lists.php.net to get a copy of this message | ||
> I added the hidden field like so because I couldn't get "htmlentities"
to
> work:
>
> <input type="hidden" name="area_todelete"
> value="<?=$area_todelete?>">
Just hope that no one submits a $area_todelete with an " in it,
otherwise they will be able to inject any kind of HTML/Javascript/etc
they want into the resulting page.
---John Holmes...