note 38776 deleted from function.mysql-query by vincent

Note Submitter: Aaron ---- Just a quick note regarding falsly submitted data. So long as I set my method to post, and I always use $_POST['varname'] to retreive your variables I have found that simply checking to see if the $_SERVER['HTTP_REFERER'] is the correct value* I have not lost too much sleep over security woes. Of course it is good practise to addslashes to all applicable values, and check for correct datatypes. (see krangs post ) *i.e. the URI/URL of the form that should be submitting this data (or perhaps just the same domain name/ip).