PHP programming forum. Ask questions or help people concerning PHP code. Don't understand a function? Need help implementing a class? Don't understand a class? Here is where to ask. Remember to do your homework!
Set Search Time - A google chrome extension. When you search only results from the past year (or set time period) are displayed. Helps tremendously when using new technologies to avoid outdated results.
Not really what I am after, I would rather have it grab the variables from the db if $_GET['edit'] exists and show a blank from if $_GET['edit'] isnt parsed ...
the form is inside the $_GET['edit'] conditional. If moved out of it, and you make sure all the variables you are printing in there are set (to blanks, just in case) you should get what you are looking for.
To avoid this style of attack i usually prefer to add/update/delete pages only available via POST instead of GET.
Is safe to use $_GET to grab the initial record id to show the data in the form, then use a hidden field from there and $_POST the id to the delete funcion?
When I delete a record I send the id across the url and use $_GET to grab the id and process the delete function .. this is not safe even when only certain user levels have access to the add/edit/delete code via sessions etc ..?