The security thread

Out of context: Reply #39

  • Started
  • Last post
  • 39 Responses
  • cherub0

    I'm new to html forms, and this is my first time doing backend stuff. I am using a simple html form to plug into my action php

    Simple question.

    What is the general consensus?

    Is GET more insecure, or POST?

    why?

    • POST doesn't show the data in the URL.uan
    • ^thats what I read too. And apparently bots can mess with ur form if you use GET? or something like that?cherub
    • bots and humans. you can hack both...you can try sql commands in the form to hack into the site if you want.uan
    • that's why using the wp default login is a better idea...all the known attacks are covered.uan
    • Always sanitize your inputs to filter XSS and SQL injection and use SSL/TLSspot13

View thread