|
From: Alby L. <al...@th...> - 2001-07-02 13:05:32
|
Justin,
I am one of those lazy coders, but I can't stand using GET but often do to
ensure the integrity of my variable names and values. This has been a thorn
in my side and I would like a method to handle this insecurity as well.
My initial thought would be to include a debug option to globally echo all
post varnames and values to the page. This is not a holistic solution
however as I am often using servlet like pages that only include code and
call a header ("Location: snafu.php"); when my logic is done.
Anyone have any other ideas/problems to contribute to this?
Alby Lash
Justin said, and I quote:
"
Now, I hate GET vars because of their security problem.
As far as I am concerned, their only utility is for
bookmarking, or lazy coders. They are a definite security risk if you
have weaknesses in your design.
"
|