On Wed, Jan 22, 2003 at 02:18:24PM +0530, Amitay Isaacs wrote:
Use POST method only. Also turn the register_globals off in the configuration file. To access the variables which are posted you can use the special variables.
I have lots of scripts which use $vaname directly. I understand the security issues and will be programming future scripts with $_POST["varname"] in future. But whats wrong in having GET instead of POST? Is there a way by which I can change all the varaiables from $_POST["varname"] to $varname. Any function that can transfer all the variables from _POST to ones without _POST, I do not want to modify all the scripts I have already written with $varname to $_POST["varname"].
$_POST["varname"]
Amitay.