From: "Ford, Mike" <[EMAIL PROTECTED]>
if (is_array($_POST['state'])){

This check isn't really necessary in PHP, since $_POST['state'] will *always* be an array if the form field has NAME='state[]', even if only 1 is selected.

But remember that the form comes from the client. Just because you create the form with "state[]", that doesn't mean I'm going to send it that way. ;)

If it was changed, it could cause an error that might expose file structure or whatever. So the check is a good thing to ensure nothing was changed.

---John Holmes...

PHP Database Mailing List (
To unsubscribe, visit:

Reply via email to