Re: Directing form to different handlers?
| From: | James Ausmus | Date: | Mon, 01 Jun 2009 19:43:46 +0000 |
| Subject: | Re: Directing form to different handlers? | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-293447@lists.php.net to get a copy of this message | ||
On Mon, Jun 1, 2009 at 12:32 PM, Matthew McKay <matt@mattmckay.org> wrote:
> It would be much simpler and cleaner to use Javascript to modify the form's
> action attribute onClick.
>
Not really. What about clients who don't have Javascript installed?
What about users who want to either do something nefarious or just to
see what happens, - exposing your "Delete my record"-specific PHP
code could potentially cause security holes. The less of your internal
interface/structure you expose to the end user, the less easy it is
for the casual script kiddies to find the security holes that you have
(and yes, everyone has them... ;) )
-James