RE: [PHP-WIN] Passing +, =, - at post and get
| From: | George Pitcher | Date: | Thu, 20 May 2004 13:33:00 +0000 |
| Subject: | RE: [PHP-WIN] Passing +, =, - at post and get | ||
| References: | 1 | Groups: | php.windows |
| Request: | Send a blank email to php-windows+get-23772@lists.php.net to get a copy of this message | ||
Charles,
No way! This site will only have about 3-4 users as its an intranet and I'll
be parsing everything at the server end.
George
> -----Original Message-----
> From: Charles P. Killmer [mailto:charlesk@netgaintechnology.com]
> Sent: 20 May 2004 2:31 pm
> To: php-windows@lists.php.net
> Subject: RE: [PHP-WIN] Passing +, =, - at post and get
>
>
> I hope you are not allowing the client to send T-SQL through the query
> string. Consider them sending something like
> File.php?Query='; drop table XXX; --
>
> Charles Killmer
>
> -----Original Message-----
> From: George Pitcher [mailto:george.pitcher@ingenta.com]
> Sent: Thursday, May 20, 2004 8:25 AM
> To: php-windows@lists.php.net
> Subject: [PHP-WIN] Passing +, =, - at post and get
>
> Hi,
>
> I want to be able to pass the '=', '+' and '-' characters both
> from a
> web form and as part of a url, to enable a better way of searching.
> However, these characters are choking my IIS webserver and not getting
> through to the script.
>
> Can anyone suggest a better way of achieving this?
>
> Cheers
>
> George
>
> --
> PHP Windows Mailing List (http://www.php.net/) To unsubscribe, visit:
> http://www.php.net/unsub.php
>
> --
> PHP Windows Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>