Re: [PHP] Re: php/mysql url validation methods...

2005-02-14 Thread darren kirby
quoth the Jason Barnett: > Darren Kirby wrote: > > The problem is that after playing around with this a bit, it is clear > > that someone can craft a url with an arbitrary $postid that is not in the > > database yet. Now naively, it would seem that the worst someone could do > > is just create arbi

[PHP] Re: php/mysql url validation methods...

2005-02-14 Thread Jason Barnett
Darren Kirby wrote: Hello all, On the main page of my website I have written a very simple comments feature that allows people to leave a message under my posts, much like a blog. I have purposely kept this very simple... On the main page I have simple text links that someone can click on if they w