what are the vulnerabilities in direct use of GET and POST?
问题 i want to know what are the vulnerabilities while using the GET and POST variable directly. ie with out trimming and addslashes function and mysql escape string something like that. My Question is What more we need to take care of while playing with GET and POST. What kind of attacks are there like SQL injection? 回答1: In general, and not limited to GET and POST but also to any data that comes from outside the system (including cookies in the case of web applications): Almost all