FN-FORUM: PHP PostData security

date posted 27th May 2007 21:04

Hi,

I was informed recently of a security risk with post data submitted from
forms in PHP. I was told that if a message is displayed asking the user to
ressend data when the page is refreshed then the website is potentially
insecure.

I've done a quick search on google which returned very little however i
found a site that suggested a processing script that put all post variables
into a session and then redirected to the main script, which i have now
done.

First of all does anyone know if this is really a risk and if so would the
above solution have eliminated that risk?

Thanks

James