note 32527 deleted from security.variables by didou
| From: | didou@php.net | Date: | Fri, 30 May 2003 07:54:38 +0000 |
| Subject: | note 32527 deleted from security.variables by didou | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-49403@lists.php.net to get a copy of this message | ||
Note Submitter: manuelle_slow@yahoo.fr
----
(about security on url parameters)
Why don't you simply use a 'cast'?
like this :
$id = (int) $_POST['id'];
by this way you can be sure your variable is an integer. if $_POST['id'] contain a string,
the cast will return 0.