RE: [PHP] Question: Validation on select boxes and lists.
| From: | Stuart Felenstein | Date: | Thu, 21 Oct 2004 22:00:10 +0000 |
| Subject: | RE: [PHP] Question: Validation on select boxes and lists. | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-200040@lists.php.net to get a copy of this message | ||
Graham,
Thank you. Actually , you suggested this site to me
the other day and it's great! I have read through a
number of documents and have a few more to get
through.
How would a hacker pass an HTTP message ?
That is interesting.
Stuart
--- Graham Cossey <graham@cossey.plus.com> wrote:
> [snip]
> > Hope this is not off topic, and it might be a dumb
> > question, but I'm new.
> > For drop down menus, list boxes, selects etc,
> would
> > validation be needed to check the string , say for
> > special characters ? (as a security precaution)
>
> I have read several posts/articles on this matter
> and although the actual
> HTML form will only pass the values available, it is
> possible for a hacker
> to compose an HTTP 'message' with data other than
> that provided by the HTML
> form.
>
> So, validation is advisable.
>
> A site that I would highly recommend as it has
> enlightened me on several
> topics is: www.shiflett.org
>
> Graham
>
>
>