Posted by Geoff Berrow on 07/23/05 14:55
I noticed that Message-ID: <dbt6ta$bnb$1$8300dec7@news.demon.co.uk> from
Tony Marston contained the following:
><input class="submit" type="submit" name="task#person_del.php"
>value="Delete" />
>
>The advantage of my method is that I do not pass primary keys in URLs as a
>security measure.
What's the worst they could do with the primary key?
--
Geoff Berrow (put thecat out to email)
It's only Usenet, no one dies.
My opinions, not the committee's, mine.
Simple RFDs http://www.ckdog.co.uk/rfdmaker/
Navigation:
[Reply to this message]
|