On Tue, August 7, 2007 5:08 pm, Daniel Brown wrote: > It's actually not so much for echo'ing as it is for processing the > data in another manner that makes it dangerous not to do some > sanitizing and checking.... such as database manipulation. This is wrong. Google for "cross site scripting attack" to get some sense of just how wrong this is. :-) -- Some people have a "gift" link here. Know what I want? I want you to buy a CD from some indie artist. http://cdbaby.com/browse/from/lynch Yeah, I get a buck. So? -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php