On 3/16/2015 12:02 AM, Ethan Rosenberg wrote:
I have this in the program -- echo "<form method= 'post' action='HandleWeight.php'>"; echo "<center><strong><input type = 'submit' value= 'WEIGH'></strong></center>"; echo "</form>"; I'm testing from a form, which previously worked perfectly - TIA Ethan
How does your script properly (note: 'properly') recognize that the user clicked on the 'Weigh' button? You don't have a name attribute on that submit element so you can't possibly check it. Consequently users could spoof your form to achieve something that you aren't planning on if that's any concern to you.
PS - html does not use nor require spaces in its syntax. Your attributes are better written as: method='POST' than the way you are doing it.
clicked on the 11 -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
