note 21367 added to security.database
| From: | jester at blackcodemail dot com | Date: | Thu, 09 May 2002 23:38:57 +0000 |
| Subject: | note 21367 added to security.database | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-30407@lists.php.net to get a copy of this message | ||
Oops, sorry, there is a typo in the above code.
if(!is_numeric($_POST['var'])) {
die('Invalid input');
exit;
}
You must use is_numeric() with variables submitted through a form, any variables submitted through a
form are regarded as a string, so use is_numeric(). My mistake, doh.
--
http://www.php.net/manual/en/security.database.php
http://master.php.net/manage/user-notes.php?action=edit+21367
http://master.php.net/manage/user-notes.php?action=delete+21367
http://master.php.net/manage/user-notes.php?action=reject+21367