Re: [phplib] Registering form variables From: Jens Benecke (phplib <email protected>)
Date: 09/12/00

On Tue, Sep 12, 2000 at 11:46:11PM +0200, R.B. Scholtus wrote:

> You can also use POST vars to make sure the input is valid (=post data)
> and not user 'generated' (=get data). For example in order.php3:

er, what exactly prevents me from creating a local html file with a form
that does method=POST onto your results/processing page?

what prevents me from telnetting to the web server and then manually typing

POST doit.php3 .... etc

?

Sorry if I'm blind, but this is no solution for me ;)

-- 
`Man sollte dem Verantwortlichen für ILOVEYOU alles     http://www.linuxfaq.de  
 mögliche antun, aber wahrscheinlich wird bloß       http://www.hitchhikers.de    
 seine Firma zweigeteilt." -- Usenet             http://www.pinguin.conetix.de     

  • application/pgp-signature attachment: stored