Re: FN-FORUM: PHP PostData security

date posted 27th May 2007 21:52

> First of all does anyone know if this is really a risk and if so would
> the above solution have eliminated that risk?

Can't see how it would be. The only risk I can think of comes from
displaying user-supplied data without using htmlspecialchars(), or
otherwise making it safe, first.

Just putting POST variables into session variables doesn't do anything
magic.

Who informed you, and what did they say?

Anthony
--
www.fonant.com - Quality web sites