do you need to use mysql_real_escape_string on a remember me check box? is there any way the user could change the value? I guess it wouldn't hurt to do it anyways...
Yes, a "user" could change the value by submitting his/her own http request, totally bypassing what's in your form.
"Please give us a simple answer, so that we don't have to think, because if we think, we might find answers that don't fit the way we want the world to be."
~ Terry Pratchett in Nation
Or via cURL using post, or just creating their own HTML form with the action URL and form field names matching what's on your form page -- which is why you can never depend on client-side (i.e. JavaScript) validation for any important form validation.
"Please give us a simple answer, so that we don't have to think, because if we think, we might find answers that don't fit the way we want the world to be."
~ Terry Pratchett in Nation
mysql_real_escape_string on remember me checkbox?
Reply With Quote
Bookmarks