Re: [PHP-INSTALL] multi threading

2008-07-09 Thread kranthi
tnkz for the reply... but i intended to know bout performance/speed aspects(srry if i misused the term "multi threading" ter) i m afraid that this post is going towards security issues... wat i wanted to know is which is better (in terms of speed and performance) - /login.php?action=profi

Re: [PHP-INSTALL] multi threading

2008-07-08 Thread mike
Actually I'd change that slightly: 1) Filter/sanitize input (php.net/filter works great for this) 2) Sanity check input (bounds/type checking and then check if it is legit against the datasource) a) I use intval() when I expect numeric input. It will scrub out anything that isn't an integer. Depen

RE: [PHP-INSTALL] multi threading

2008-07-08 Thread Max Thayer
The practice of sending request/response variables to determine what action or process to perform isn't exactly multi-threading. What you need to be aware of is cross-site scripting attacks and cross-site request forgery; XSS and CSRF (pronounce see-surf) respectively. First two concepts to study