Re: How 2 pass a hidden field string in html form to a php script

Michael Fesser:

Users can manipulate everything that's sent to the server: HTTP headers,
form fields, cookies ... You simply have to take this into account and
always validate the received data in your script.

I now validate to check if they don't match what I need:

if ( $_POST[fields] != 'validation string' ){
exit;
}

would that be sufficient?

--
Tru7nk

.

Relevant Pages