PHP Question?

Out of context: Reply #3

• Started
• Last post
• 3 Responses

• vaxorcist0

  make sure you force validate the variable to a number or something very simple, like you filter out any non-alpha/numeric characters.... otherwise somebody may try to try some mischief

  index.php?page=/etc/passwd

  or even try to mess you up with a loop like:

  index.php?page=index.php

  vaxorcist 0Permalink

  UpvoteDownvote

  Flag

  • a clean switch case statement would be okay to prevent such stuff too....vaxorcist

  Show [[ numHiddenNotes ]] more notesAdd Note

  SaveCancel

View thread