note 38776 added to function.mysql-query

Just a quick note regarding falsly submitted data. So long as I set my method to post, and I always use $_POST['varname'] to retreive your variables I have found that simply checking to see if the $_SERVER['HTTP_REFERER'] is the correct value* I have not lost too much sleep over security woes. Of course it is good practise to addslashes to all applicable values, and check for correct datatypes. (see krangs post ) *i.e. the URI/URL of the form that should be submitting this data (or perhaps just the same domain name/ip). ---- Manual Page -- http://www.php.net/manual/en/function.mysql-query.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+38776 Delete -- http://master.php.net/manage/user-notes.php?action=delete+38776&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+38776&report=yes Search -- http://master.php.net/manage/user-notes.php