note 89486 deleted from reserved.variables.post by danbrown

Note Submitter: fuhrysteve at gmail dot com ---- Note that the data type of POST data is always a string: <?php gettype($_POST['whatever']) === 'string'; // always TRUE if $_POST['whatever'] contains data // You may find it helpful for security reasons (to avoid possible SQL // injection vulnerability, etc) to do something like this: $id = (int)$_POST['id']; orObject->addRecord(int)($_POST['id']); $price = (float)$_POST['price']; // you get the idea... // to avoid silly things like this: $id = addslashes($_POST['id']); Object->addRecord(addslashes($_POST['id'])); ?>