Re: Is there a way to protect PHP's $_POST, $_GET when user tamper with post string in URL toolbox???
| From: | Scott Fletcher | Date: | Wed, 07 Jan 2004 18:49:34 +0000 |
| Subject: | Re: Is there a way to protect PHP's $_POST, $_GET when user tamper with post string in URL toolbox??? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-173995@lists.php.net to get a copy of this message | ||
Will check into whether did I use the post method correctly.
Speaking of session, I don't see how can it be done to put the data into the
session after the user click the submit button before going over to the next
webpage.
FletchSOD
"Scott Fletcher" <scott@abcoa.com> wrote in message
news:20040107174214.64918.qmail@pb1.pair.com...
> Hi!
>
> I wanted to know is is there a way to configure PHP to make it not be
> affected when the web user tamper with the values in the post string after
a
> webpage is submitted or something. (Further explanation below)
>
> I noticed when I use the hidden html input tag with hidden data in it
> then when I click the submit button to submit the webpage, the hidden data
> then show up in the URL address. Fine, no problem. But I noticed one
> problem, I can changed the value in the URL toolbar of the web-browser and
> get different result on the webpage. I know it is where $_REQUEST[],
> $_GET, etc. come into play. So, is there a way to keep that $_REQUEST[],
> $_GET[] data unchanged? Does this require the php.ini configuration or
> what?
>
> Thanks,
> FletchSOD