From: Alby L. <al...@th...> - 2001-07-02 13:05:32
|
Justin, I am one of those lazy coders, but I can't stand using GET but often do to ensure the integrity of my variable names and values. This has been a thorn in my side and I would like a method to handle this insecurity as well. My initial thought would be to include a debug option to globally echo all post varnames and values to the page. This is not a holistic solution however as I am often using servlet like pages that only include code and call a header ("Location: snafu.php"); when my logic is done. Anyone have any other ideas/problems to contribute to this? Alby Lash Justin said, and I quote: " Now, I hate GET vars because of their security problem. As far as I am concerned, their only utility is for bookmarking, or lazy coders. They are a definite security risk if you have weaknesses in your design. " |