On Thu, Sep 17, 2009 at 10:00 AM, Pyther <[email protected]> wrote:

>
> On Thu, Sep 17, 2009 at 10:42 AM, miles groman <[email protected]>
> wrote:
> >
> >
> > On Thu, Sep 17, 2009 at 7:03 AM, Pyther <[email protected]> wrote:
> >
> >> How can I access the form data in POST?
> >> In the example myform is global.
> >>
> >
> > urls = ( '/save', 'MyFormProcessor')
> >
> > class MyFormProcessor:
> >     def POST(self):
> >         data = web.input()
> >         # do something with data
> > >
> >
>
> Cheers! I have other question. How secure is using web.input()? The
> page for form.py states "#don't do web.insert('data_table',
> **web.input()) because malicious data could be submitted too"
>
>
 Have you ever met Bobby ?

http://bobby-tables.com/

You should be fine as long as you validate the data first.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"web.py" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [email protected]
For more options, visit this group at http://groups.google.com/group/webpy?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to