Re: [PHP] Input Validation of $_SESSION values

2003-11-05 Thread Chris Shiflett
--- Pablo Gosse <[EMAIL PROTECTED]> wrote: > It's obviously best practice to rigorously check and validate all input > coming via $_GET or $_POST, but what about $_SESSION values? Session data can be considered safe, but there are of course caveats. It is not possible for the user to manipulate se

[PHP] Input Validation of $_SESSION values

2003-11-05 Thread Pablo Gosse
Hi all. A quick question as an extension to the threads about input validation over the past weeks. It's obviously best practice to rigorously check and validate all input coming via $_GET or $_POST, but what about $_SESSION values? Without proper checking of $_GET and $_POST, it is very easy fo