Re: Form Design Advice

Поиск
Список
Период
Сортировка
От Ross Gohlke
Тема Re: Form Design Advice
Дата
Msg-id 50192.4.62.156.229.1109954376.squirrel@4.62.156.229
обсуждение исходный текст
Ответ на Re: Form Design Advice  (Bruno Wolff III <bruno@wolff.to>)
Ответы Re: Form Design Advice  (Colin McGuigan <cmcguigan@earthcomber.com>)
Список pgsql-novice
>>Code your form manually with the proper element names. Add a hidden
element for each visible element to pass the field's type for validation

>>purposes.
>
> This should be in an additional table in the database, not on the form.
Otherwise the end users can send back incorrect types to check against
which could potentially be a security issue.

I'm not sure I understand. How could a user send incorrect data types if
the types are included as hidden fields? Since the variables are
declared as coming from $_POST, they cannot send anything in the URL.






В списке pgsql-novice по дате отправления:

Предыдущее
От: Bruno Wolff III
Дата:
Сообщение: Re: Form Design Advice
Следующее
От: Colin McGuigan
Дата:
Сообщение: Re: Form Design Advice