RE: [PHP-INSTALL] multi threading

The practice of sending request/response variables to determine what action or process to perform isn't exactly multi-threading. What you need to be aware of is cross-site scripting attacks and cross-site request forgery; XSS and CSRF (pronounce see-surf) respectively. First two concepts to study up on will be: Filter input Validate output http://en.wikipedia.org/wiki/Cross-site_scripting http://www.owasp.org/index.php/Cross-Site_Request_Forgery Chris Schiflet has made a name for himself writing about the subject. http://shiflett.org/articles/cross-site-request-forgeries is a direct link to his blog on CSRF. Max H. Thayer Software Developer Center for High-Throughput Structural Biology Hauptman-Woodward Medical Research Inst. 700 Ellicott St. Buffalo, NY 14203 Phone: 716-898-8637 Fax: 716-898-8660 http://www.chtsb.org http://www.hwi.buffalo.edu -----Original Message----- From: kranthi [mailto:kranthi117@gmail.com] Sent: Tuesday, July 08, 2008 7:46 AM To: php-install@lists.php.net Subject: [PHP-INSTALL] multi threading hi all, i m using a single php script to do several jobs using if statements(for example /login.php?action=profile instead of profile.php). but one of my friend said that since php is unable to handle multi threads this is not advisable. how far is it true????