RE: multi threading

["Max Thayer" <mthayer@xxxxxxxxxxxxxxx>]

The practice of sending request/response variables to determine what
action or process to perform isn't exactly multi-threading.

What you need to be aware of is cross-site scripting attacks and
cross-site request forgery; XSS and CSRF (pronounce see-surf)
respectively.  First two concepts to study up on will be:

Filter input
Validate output

http://en.wikipedia.org/wiki/Cross-site_scripting
http://www.owasp.org/index.php/Cross-Site_Request_Forgery

Chris Schiflet has made a name for himself writing about the subject.
http://shiflett.org/articles/cross-site-request-forgeries is a direct
link to his blog on CSRF.

Max H. Thayer
Software Developer
Center for High-Throughput Structural Biology
 
Hauptman-Woodward Medical Research Inst.
700 Ellicott St.
Buffalo, NY 14203
Phone: 716-898-8637
Fax: 716-898-8660
http://www.chtsb.org
http://www.hwi.buffalo.edu
-----Original Message-----
From: kranthi [mailto:kranthi117@xxxxxxxxx] 
Sent: Tuesday, July 08, 2008 7:46 AM
To: php-install@xxxxxxxxxxxxx
Subject:  multi threading

hi all,

i m using a single php script to do several jobs using if statements(for
example /login.php?action=profile instead of profile.php). but one of my
friend said that since php is unable to handle multi threads this is not
advisable. how far is it true????