On Thu, Sep 17, 2009 at 11:05 AM, miles groman <[email protected]> wrote: > > > On Thu, Sep 17, 2009 at 10:00 AM, Pyther <[email protected]> wrote: >> >> On Thu, Sep 17, 2009 at 10:42 AM, miles groman <[email protected]> >> wrote: >> > >> > >> > On Thu, Sep 17, 2009 at 7:03 AM, Pyther <[email protected]> wrote: >> > >> >> How can I access the form data in POST? >> >> In the example myform is global. >> >> >> > >> > urls = ( '/save', 'MyFormProcessor') >> > >> > class MyFormProcessor: >> > def POST(self): >> > data = web.input() >> > # do something with data >> > > >> > >> >> Cheers! I have other question. How secure is using web.input()? The >> page for form.py states "#don't do web.insert('data_table', >> **web.input()) because malicious data could be submitted too" >> > > Have you ever met Bobby ? > > http://bobby-tables.com/ > > You should be fine as long as you validate the data first. > > > > No I have not :)
Would there be any negative affect by creating the form in the template? Say if I wanted greater control over my form (code wise). Also what does the Astrix, next to the p, do? user_form = f.Form(*p) --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "web.py" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [email protected] For more options, visit this group at http://groups.google.com/group/webpy?hl=en -~----------~----~----~----~------~----~------~--~---
