On 8/20/07, Robert Ryan <[EMAIL PROTECTED]> wrote:

> you should use proper data validation...........would you please explain this.

By that, I mean, validate your data before you try to use it. If you
are expecting a range of numbers, or a set of characters, make sure
the user have given you what you are expecting. Or if your data is
only supposed to be a certain length, make sure the user haasn't given
you something longer. Some older C I/O functions, like gets, will let
a user enter an arbitrary amount of data, exposing the program to
dangerous buffer overruns. These kinds of functions should never be
used.

-- Brett
------------------------------------------------------------
"In the rhythm of music a secret is hidden;
    If I were to divulge it, it would overturn the world."
               -- Jelaleddin Rumi

Reply via email to