Re: A really fun one
| From: | Chris Adams | Date: | Thu, 13 Jul 2000 20:24:42 +0000 |
| Subject: | Re: A really fun one | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-6538@lists.php.net to get a copy of this message | ||
> It would still be a good idea to check the month/day combination
> in your php script. I have been bitten a couple of times when I
> was *sure* I had a bullet-proof verification written in
> Javascript, only to find that some combination of circumstances I
> had never imagined caused invalid data to be passed back to my
> php script.
More importantly, basic security requires that you never trust input from
the browser. Even if you debug all of your JavaScript, you still have to
look at what a malicious user could deliberately send.