if (is_array($_POST['state'])){
This check isn't really necessary in PHP, since $_POST['state'] will *always* be an array if the form field has NAME='state[]', even if only 1 is selected.
But remember that the form comes from the client. Just because you create the form with "state[]", that doesn't mean I'm going to send it that way. ;)
If it was changed, it could cause an error that might expose file structure or whatever. So the check is a good thing to ensure nothing was changed.
---John Holmes...
-- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
