RE: [PHP-INSTALL] multi threading
[email protected] ("Max Thayer")
| Newsgroups | php.install |
|---|---|
| Message-ID | <5AB83D2A30B3D345B8BBC12B9FFE815F3462F4@claven.dhcp.hwi.buffalo.edu> |
The practice of sending request/response variables to determine what action or process to perform isn't exactly multi-threading. What you need to be aware of is cross-site scripting attacks and cross-site request forgery; XSS and CSRF (pronounce see-surf) respectively. First two concepts to study up on will be: Filter input Validate output http://en.wikipedia.org/wiki/Cross-site_scripting http://www.owasp.org/index.php/Cross-Site_Request_Forgery Chris Schiflet has made a name for himself writing about the subject. http://shiflett.org/articles/cross-site-request-forgeries is a direct link to his blog on CSRF. Max H. Thayer Software Developer Center for High-Throughput Structural Biology Hauptman-Woodward Medical Research Inst. 700 Ellicott St. Buffalo, NY 14203 Phone: 716-898-8637 Fax: 716-898-8660 http://www.chtsb.org http://www.hwi.buffalo.edu -----Original Message----- From: kranthi [mailto:[email protected]] Sent: Tuesday, July 08, 2008 7:46 AM To: [email protected] Subject: [PHP-INSTALL] multi threading hi all, i m using a single php script to do several jobs using if statements(for example /login.php?action=profile instead of profile.php). but one of my friend said that since php is unable to handle multi threads this is not advisable. how far is it true????