On Wed, Nov 9, 2016 at 12:37 PM, Chip Scheide <[email protected]>
wrote:

> I do NO web work so take this idea with that in mind
>
> Instead of :
> On Wed, 9 Nov 2016 19:58:16 +0000, Mike McCall wrote:
> >       Else
> >                               $p:=Get pointer(arr_Web_Field_Name{$i})
> >                               $p->:=arr_Web_Field_Value{$i}
> >               End case
>
> if (find in array($arr_Legal_Variable_Names;arr_Web_Field_Name{$i})>0)
>    $p:=Get pointer(arr_Web_Field_Name{$i})
>    $p->:=arr_Web_Field_Value{$i}
> else
>    `do nasty things since someone tried to hack your server
> end if
>
> Where arr_Legal_Variable_Names
> is an array of valid variable names and any value NOT in this array is
> an error
> Chip
>
> I do a lot of web work and I think this is a good idea.
**********************************************************************
4D Internet Users Group (4D iNUG)
FAQ:  http://lists.4d.com/faqnug.html
Archive:  http://lists.4d.com/archives.html
Options: http://lists.4d.com/mailman/options/4d_tech
Unsub:  mailto:[email protected]
**********************************************************************

Reply via email to