The practice of sending request/response variables to determine what
action or process to perform isn't exactly multi-threading.

What you need to be aware of is cross-site scripting attacks and
cross-site request forgery; XSS and CSRF (pronounce see-surf)
respectively.  First two concepts to study up on will be:

Filter input
Validate output

http://en.wikipedia.org/wiki/Cross-site_scripting
http://www.owasp.org/index.php/Cross-Site_Request_Forgery

Chris Schiflet has made a name for himself writing about the subject.
http://shiflett.org/articles/cross-site-request-forgeries is a direct
link to his blog on CSRF.

Max H. Thayer
Software Developer
Center for High-Throughput Structural Biology
 
Hauptman-Woodward Medical Research Inst.
700 Ellicott St.
Buffalo, NY 14203
Phone: 716-898-8637
Fax: 716-898-8660
http://www.chtsb.org
http://www.hwi.buffalo.edu
-----Original Message-----
From: kranthi [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, July 08, 2008 7:46 AM
To: php-install@lists.php.net
Subject: [PHP-INSTALL] multi threading

hi all,

i m using a single php script to do several jobs using if statements(for
example /login.php?action=profile instead of profile.php). but one of my
friend said that since php is unable to handle multi threads this is not
advisable. how far is it true???? 

Reply via email to