Posted by Gordon Burditt on 06/19/06 14:36

>You might want to consider validating your inputs before submitting to
>the server.

Validating inputs ONLY before submitting to the server is
worse than no validation at all. In this case, the attacker
gets to do his own validation.

Gordon L. Burditt

[Back to original message]