Re: Munging hidden/form variables
| From: | Simon Garner | Date: | Thu, 01 Mar 2001 23:51:39 +0000 |
| Subject: | Re: Munging hidden/form variables | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-42243@lists.php.net to get a copy of this message | ||
From: "Boget, Chris" <Chris.Boget@wild.net>
> I'm already doing this. However, if I have a hidden variable containing
> a value of the current user I'm working with, that value can be changed
> to something else and it would pass the test. However, I need to find a
> way to determine if something like that has happened. That's where my
> description of what I was thinking of doing came from.
>
> Chris
>
Does the user have a password? You need to check if the password matches as
well.
Cheers
Simon Garner