RE: FN-FORUM: (Orginally No Subject)

date posted 1st November 2003 11:41

Pam, about her SQL:
> I am changing it to a post
> anyway

Be aware that this doesn't actually make the site more secure - it's just
security through obscurity (i.e. it's no longer obvious that you could carry
out an SQL injection attack). It's easily possible to fake POST requests, so
you should still make sure that you vet the posted parameters.

- Nick Grimshaw
{ if you're not part of the solution, you're part of the precipitate. }