"Jay Blanchard" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED]
[snip]
 for $_GET[], I found indirect references
(documentation of other subjects that use $_GET[]  and $_POST[] )
but no documentation focusing directly on either.

Is there on line documentation specifically dedicated to these two
phenomena?
[/snip]

This is more of a general web programming question (see the info at
http://www.w3c.org) GET and POST are two different methods of moving
data from client to server. The GET method utilizes the URL for passing
data and is limited in size (I forget the total number of characters
allowed in the URL). It is also makes spoofing a little easier. Let us
say I am an employee of a company and my app designers have done a poor
job at security. I go to employee information at

http://www.foo.com/employee.php?eid=jsmith

If I have some snap and I want to see some other employee's info I can
then type it into the URL

http://www.foo.com/employee.php?eid=bstreisand

POST removes the information from the view of the user, and IIRC you can
pass tons of information to the server.

The rules for usage come down to this - A little common sense goes a
long way. There are really no specific rules. For web apps at my company
I set the rules, I have seen other companies with other rules for the
use of these two.


I googled a few different queries and can't find any direct documentation.

 http://www.w3c.org has a lot of info, but none that I can find' on this subject (they 
need a 'search this site' option)

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to