Re: Header() - POST

From:	Maciek Sokolewicz	Date:	Sun, 21 Sep 2008 10:36:39 +0000
Subject:	Re: Header() - POST
References:	1 2 3 4	Groups:	php.general
Request:	Send a blank email to php-general+get-280619@lists.php.net to get a copy of this message

Lupus Michaelis wrote:

Michelle Konzack a écrit :
Why using JS?
    echo "<meta http-equiv=\"refresh\" content=\"0;" . $FULL_URL "\">";
would do the trick...
No, because it'll not send back the datas in the hide form. And if you suggest to pass datas in a HTTP GET, I'll answer XSS in the scope :)

Your xss answer is moot. XSS attacks can (almost) just as easily be performed via POST as they can via GET.