> I agree that data validation is the most important thing you can do.
>  But if you have information that you don't want a user messing around
>  with that happens to be in a form or url, it doesn't seem like there
>  isn't any harm in weakly encrypting it.  For example, this might deter
>  my grandma from inserting drop table SQL commands in the url.
>
Sure there is harm since you think you achieved a certain level of
security when in fact you haven't.

>  If a hardcore hacker hits your site, you look for the most recent
> backup
Maybe that is okay for you, but I don't plan to have to deal with
crackers breaking into my applications since I did plan on stopping
them in the first place.

-Matt
[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

Reply via email to