Re: Is there a way to protect PHP's $_POST, $_GET when user tamper with post string in URL toolbox???
| From: | Richard Davey | Date: | Wed, 07 Jan 2004 17:55:28 +0000 |
| Subject: | Re: Is there a way to protect PHP's $_POST, $_GET when user tamper with post string in URL toolbox??? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-173990@lists.php.net to get a copy of this message | ||
Hello Scott,
Wednesday, January 7, 2004, 5:43:31 PM, you wrote:
SF> I noticed when I use the hidden html input tag with hidden data in it
SF> then when I click the submit button to submit the webpage, the hidden data
SF> then show up in the URL address. Fine, no problem. But I noticed one
Only if you use the GET method. This won't happen if you use POST.
You still need to validate the data at the "other end", but it would
stop casual URL hacking.
--
Best regards,
Richard mailto:rich@launchcode.co.uk