absentmindedjwc
Last Activity: Jul 29 '15, 08:02 AM
Joined: Dec 18 '07
Location:
-
either I am misunderstandin g your question, or you are misunderstandin g how GET and POST arrays work... when you push submit, the data gets sent to the server as either a GET or a POST, depending on the method of the form. $username will not be set unless you set it, the variable $_POST['username'], on the other hand, will be set.... -
I noticed, :/
a variant of what I have currently on the site, and what I posted here (among a couple other things) are going into the redesign of my site. Using JUST what I have up there clears up every XSS injection that I threw at it...
BTW: closed the hole ;)...Leave a comment:
-
Good tutorial, but this is incredibly important... (to the readers, not to the author, lol)you may have heard that $_GET poses a security risk, but it is technically no bigger than $_POST. With a basic understanding of web development, the firefox web developer toolbar, and a few minutes, a malicious user can easily pass any value he/she wants through that POST value.
the moral of the story, NEVER TRUST DATA COMING FROM THE USER!!!...Leave a comment:
No activity results to display
Leave a comment: