Re: Form Design Advice

Поиск
Список
Период
Сортировка
Искать
От
Colin McGuigan
Тема
Re: Form Design Advice
Дата
Msg-id
42288EED.3010007@earthcomber.com
Ответ на
Список
Дерево обсуждения
Using upper() / decode() together "Ross Gohlke" <ross@grinz.com>
Ross Gohlke wrote:
 > I'm not sure I understand. How could a user send incorrect data types if
 > the types are included as hidden fields? Since the variables are
 > declared as coming from $_POST, they cannot send anything in the URL.

Nothing stops anyone from copying the "View Source" of a webpage to a 
local file, modifying it as they wish, and then pointing their web 
browser at the local file and submitting from that.

--Colin McGuigan
В списке pgsql-novice по дате отправления
От: Ross Gohlke
Дата:
Сообщение: Re: Form Design Advice
От: Ross Gohlke
Дата:
Сообщение: Re: Form Design Advice
FAQ