Web form security - avoiding common mistakes

[eluser]jmadsen[/eluser]
Hi all,

I realize this post is not strictly CodeIgniter, but it certainly applies to anyone using this framework & I think is really very important for new programmers to understand. I have explained this more than a few times on Stackoverflow.com to people posting with a Codeigniter tag, so I thought I would finally mention it here.

A very quick summary of the article is:

You cannot control who accesses any url of your site, where they access it from or what data they send you

If that isn't a completely obvious statement to you, you would do well to give the following a few minutes of your time. Might just save you from getting hacked.

Avoiding web form security mistakes