Re: Waiting for localhost

Jim Giner <[email protected]> Mon, 16 Mar 2015 09:34:53 -0400
Newsgroups gmane.comp.php.database
Message-ID <[email protected]>
On 3/16/2015 12:02 AM, Ethan Rosenberg wrote:
> I have this in the program  --
>
>
> echo "<form method= 'post' action='HandleWeight.php'>";
> echo "<center><strong><input type = 'submit' value=
> 'WEIGH'></strong></center>";
> echo "</form>";
>
> I'm testing from a form, which previously worked perfectly -
>
> TIA
>
> Ethan
>

How does your script properly (note: 'properly') recognize that the user 
clicked on the 'Weigh' button?  You don't have a name attribute on that 
submit element so you can't possibly check it.  Consequently users could 
spoof your form to achieve something that you aren't planning on if 
that's any concern to you.

PS - html does not use nor require spaces in its syntax.  Your 
attributes are better written as: method='POST' than the way you are 
doing it.
clicked on the 11


-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php