Quote:
Originally posted by phpman
come on Hobo I know you are smarter than that. ;)
if you were expecting a post from a form then use POST, if you use REQUEST a person can bypass your form and get right in. or if they knew the variable name they could also upload a file from a textbox. all they have to do is load it from there site and your form will process it because you used REQUEST instead of POST
it is almost endless considering the REQUEST can handle GET, POST, FILES.
I hardly think someone's going to want to have a script on their site to post things on his tagboard. :p