Reply to RE: [PHP] security/sql issues with php

Your name:

Reply:


Posted by "bruce" on 09/22/05 03:10

recognized that...

but in all honesty, if you're going to write an app, and you're going to do
something with the data, it makes sense to me that you 'know'/ensure that
you're dealing with the correct kind of data. as i see it, this allows you
another way (low entropy) to determine that the information you're getting
is correct/valid. it also allows you to know what functions you
should/shouldn't preform on the data...

my $0.02 worth...

thoughts...

-bruce


-----Original Message-----
From: Robert Cummings [mailto:robert@interjinn.com]
Sent: Wednesday, September 21, 2005 5:00 PM
To: bedouglas@earthlink.net
Cc: 'Chris Shiflett'; 'Mikey'; 'PHP Mailing Lists'
Subject: RE: [PHP] security/sql issues with php


On Wed, 2005-09-21 at 19:54, bruce wrote:
> but now that you're talking about ints/strings/floats, aren't you now
> getting into data typing issues... which gets into the correct/appropriate
> archistecture of your app, variable namespace issues, etc...

Nope, just showing that adding 0 to data retrieved from $_GET does not
necessarily result in an int.

Cheers,
Rob.
--
..------------------------------------------------------------.
| InterJinn Application Framework - http://www.interjinn.com |
:------------------------------------------------------------:
| An application and templating framework for PHP. Boasting |
| a powerful, scalable system for accessing system services |
| such as forms, properties, sessions, and caches. InterJinn |
| also provides an extremely flexible architecture for |
| creating re-usable components quickly and easily. |
`------------------------------------------------------------'

[Back to original message]


Удаленная работа для программистов  •  Как заработать на Google AdSense  •  England, UK  •  статьи на английском  •  PHP MySQL CMS Apache Oscommerce  •  Online Business Knowledge Base  •  DVD MP3 AVI MP4 players codecs conversion help
Home  •  Search  •  Site Map  •  Set as Homepage  •  Add to Favourites

Copyright © 2005-2006 Powered by Custom PHP Programming

Сайт изготовлен в Студии Валентина Петручека
изготовление и поддержка веб-сайтов, разработка программного обеспечения, поисковая оптимизация