NYCPHP Meetup

NYPHP.org

[nycphp-talk] Preferred method for parsing multi-row submitbuttons

Cliff Hirsch cliff at pinestream.com
Mon Nov 21 17:39:26 EST 2005


Humm, so much for trusting the user contributed notes at
http://www.php.net/manual/en/language.variables.external.php

-----Original Message-----
From: talk-bounces at lists.nyphp.org [mailto:talk-bounces at lists.nyphp.org]
On Behalf Of Jeff Knight
Sent: Monday, November 21, 2005 5:33 PM
To: NYPHP Talk
Subject: Re: [nycphp-talk] Preferred method for parsing multi-row
submitbuttons


On 11/21/05, Cliff Hirsch <cliff at pinestream.com> wrote:
> I have also seen this:
> <input type="submit" name="submit[$row_id]" value="Edit"/> <input 
> type="submit" name="submit[$row_id]" value="Del"/>
>
  Pundits say #2 identifies the scripting language as PHP, but how
> much is security by obscurity worth anyway.

In this case, the Pundits you are listening to are dead wrong, Using
brackets to name form elements does not identify the language as php, as
the same structure could be used by PHP, ASP, mod_perl, cgi or even just
javascript in an html file.
_______________________________________________
New York PHP Talk Mailing List
AMP Technology
Supporting Apache, MySQL and PHP
http://lists.nyphp.org/mailman/listinfo/talk
http://www.nyphp.org




More information about the talk mailing list