Posted by Skeets on 10/13/24 11:39
i'm passing session and hidden variables between pages. not to mention
post values.
i'm a little concerned that someone with sufficient knowledge could
spoof these vlaues and manipulate the program.
is this a valid concern? i'm thinking i can check the submitting page
setting up something around the following the following code...
$base_name = basename($_SERVER['PHP_SELF']);
is this a good bet? is there a better way?
tia...
ps - posted this on php.general and, after 2 days w/o a response,
realized that probably wasn't the best place to post it.
Navigation:
[Reply to this message]
|