Bookmarks

Yahoo Gmail Google Facebook Delicious Twitter Reddit Stumpleupon Myspace Digg

Search queries

www.webdp.net, Event 9 IIS log failed to write entry, wwwxxx jeffs, Catastrophic failure Unexpected method call sequence. 0x8000ffff (-2147418113)., ksh lock a file, [unixODBC][Driver Manager]Driver's SQLAllocHandle on SQL_HANDLE_DBC failed, sed: -e expression #1, char 1: unterminated address regex, procmail + change subject, w2ksp4.exe download, /proc/kallsyms format

Links

XODOX
Impressum

#1: sending data through URL

Posted on 2008-01-25 00:36:18 by Evan Jou

Hi there,

I have a simple question for you experts here. If I key in a URL like,
for example, http://localhost/test.php?name=Evan&password=Jou directly, will
it send the name and password data to the test.php script? Can I use
$_GET['name'] and $_GET['password'] to manipulate the data? Thank you in
advance. :)

Evan Jou

Report this message

#2: Re: sending data through URL

Posted on 2008-01-25 01:26:57 by luiheidsgoeroe

On Fri, 25 Jan 2008 00:36:18 +0100, Evan Jou <l.jou@att.net> wrote:

> Hi there,
>
> I have a simple question for you experts here. If I key in a URL =

> like,
> for example, http://localhost/test.php?name=3DEvan&password=3DJou dire=
ctly, =

> will
> it send the name and password data to the test.php script? Can I use
> $_GET['name'] and $_GET['password'] to manipulate the data?

Yes, it will be in the $_GET array. It is not recommendable though. URL'=
s =

are often saved in history, can be bookmarked, shared, etc, and you don'=
t =

want usernames/passwords in there. HTTP authentication, or even better, =
=

POSTing the credentials one and just starting a session based on that, =

would be preferable.
-- =

Rik Wasmus

Report this message

#3: Re: sending data through URL

Posted on 2008-01-26 17:58:15 by Mason Barge

"Evan Jou" <l.jou@att.net> wrote in message
news:Sh9mj.163711$MJ6.19462@bgtnsc05-news.ops.worldnet.att.n et...
> Hi there,
>
> I have a simple question for you experts here. If I key in a URL like,
> for example, http://localhost/test.php?name=Evan&password=Jou directly,
> will it send the name and password data to the test.php script? Can I use
> $_GET['name'] and $_GET['password'] to manipulate the data? Thank you in
> advance. :)
>
> Evan Jou

Yes. In fact, if you bookmark the page, that's exactly what your browser
does.

I's a major reason for the plusses and minuses of GET method (most of the
minuses being security related).

Report this message

#4: Re: sending data through URL

Posted on 2008-01-27 20:18:51 by junee

On Jan 25, 4:36 am, "Evan Jou" <l....@att.net> wrote:
> Hi there,
>
> I have a simple question for you experts here. If I key in a URL like,
> for example,http://localhost/test.php?name=Evan&password=Joudire ctly, will
> it send the name and password data to the test.php script? Can I use
> $_GET['name'] and $_GET['password'] to manipulate the data? Thank you in
> advance. :)
>
> Evan Jou

Evan,
if you dont know, dig with HTML forms and submitting it with POST
method and how to access the submitted form elements in PHP $_POST[]
array.
It is really simple and more secure.

Report this message