On Tue, August 7, 2007 5:08 pm, Daniel Brown wrote:
>     It's actually not so much for echo'ing as it is for processing the
> data in another manner that makes it dangerous not to do some
> sanitizing and checking.... such as database manipulation.

This is wrong.

Google for "cross site scripting attack" to get some sense of just how
wrong this is. :-)

-- 
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/browse/from/lynch
Yeah, I get a buck. So?

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to