Re: Do I need to worry about check boxes?
| From: | Kevin Waterson | Date: | Thu, 26 May 2016 00:01:29 +0000 |
| Subject: | Re: Do I need to worry about check boxes? | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-325609@lists.php.net to get a copy of this message | ||
Consider your code
<input type="checkbox" name="vehicle" value="Bike"> I have a
bike<br>
But, because I wish to break your environment and give an error that may
lead to identifying a vulnerability I make my own form and do..
<input type="text" name="vehicle" value="really really really long
string"
/><br>
Then things can go really wrong, really fast.
NEVER TRUST USER INPUT!
http://www.phpro.org/tutorials/Validating-User-Input.html
Enjoy, Kev
--
--
"Democracy is two wolves and a lamb voting on what to have for lunch.
Liberty is a well-armed lamb contesting the vote."