RE: [PHP] Question: Validation on select boxes and lists.
| From: | Graham Cossey | Date: | Thu, 21 Oct 2004 21:47:42 +0000 |
| Subject: | RE: [PHP] Question: Validation on select boxes and lists. | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-200036@lists.php.net to get a copy of this message | ||
[snip]
> Hope this is not off topic, and it might be a dumb
> question, but I'm new.
> For drop down menus, list boxes, selects etc, would
> validation be needed to check the string , say for
> special characters ? (as a security precaution)
I have read several posts/articles on this matter and although the actual
HTML form will only pass the values available, it is possible for a hacker
to compose an HTTP 'message' with data other than that provided by the HTML
form.
So, validation is advisable.
A site that I would highly recommend as it has enlightened me on several
topics is: www.shiflett.org
Graham