Welcome Guest, Not a member yet? Register   Sign In
Form validation, why only the $_POST array?
#11

[eluser]moodh[/eluser]
[quote author="Evil Wizard" date="1233948883"]I acknowledge that there is a difference between security and validity, I was just stating that the two methods to submit a HTML form is via "get" and "post", get is an insecure way, allowing the URL string to be altered after you have validated the input, circumventing your validation efforts. I also recently needed to validate an array that was not post/get and I couldn't be certain it would be my code that created the array and so had to write my own custom array validation method. Had there been a generic validation method available it would have made it easier.

I didn't mean to sound obnoxious, I merely asked why the need to validate the $_GET array[/quote]

You can alter POST values with Firebug so saying it's more secure is moot.
I agree with the OP on the issue at hand.




Theme © iAndrew 2016 - Forum software by © MyBB