note 108918 added to wrappers
| From: | aaron dot mason+php at thats-too-much dot info | Date: | Tue, 05 Jun 2012 01:46:20 +0000 |
| Subject: | note 108918 added to wrappers | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-188403@lists.php.net to get a copy of this message | ||
Be aware of code injection, folks - like anything else you take from the user, SANITISE IT FIRST.
This cannot be stressed enough - if I had a dollar for each time I saw code where form input was
taken and directly used (by myself as well, I've been stupid too) I'd probably own PHP.
While using data from a form in a URL wrapper is asking for trouble, you can greatly minimise the
trouble by making sure your inputs are sane and not likely to provide an opening for the LulzSec of
the world to cause havoc.
----
Server IP: 113.20.13.217
Probable Submitter: 203.38.70.204
----
Manual Page -- http://www.php.net/manual/en/wrappers.php
Edit -- https://master.php.net/note/edit/108918
Del: integrated -- https://master.php.net/note/delete/108918/integrated
Del: useless -- https://master.php.net/note/delete/108918/useless
Del: bad code -- https://master.php.net/note/delete/108918/bad+code
Del: spam -- https://master.php.net/note/delete/108918/spam
Del: non-english -- https://master.php.net/note/delete/108918/non-english
Del: in docs -- https://master.php.net/note/delete/108918/in+docs
Del: other reasons-- https://master.php.net/note/delete/108918
Reject -- https://master.php.net/note/reject/108918
Search -- https://master.php.net/manage/user-notes.php