Re: FN-FORUM: PHP PostData security

date posted 27th May 2007 23:32

So am i right in thinking that a script like the one below would fix the
problem?



and then using the session variables to process?

I would still however like to know how this attack works... The article
seesm to be about SQL injection which i already knew about. I can't find
anything about processing data on the same form! All the books and articles
i've read have taught to use the same script for sending and processing data
and not one of them has mentioned this kind of attack! kind of worrying.

Sorry if i'm missing something but i can't see how the article relates to
the problem. :o)

Thanks

James