|
We use session based authentication and I'm not saying our site and content is 100% secure, I do get users who write in asking for their passwords to be changed because they were dumb enough to share them and can't login because their buddies are using up their available sessions.
Even if a user is fucking around with a query string, I try and limit the script errors from bad data coming in via POST or GET, if not only to feel safer, but also to keep from looking stupid when someone can see you have a "parse error on line 20 of ....".
Granted, 100% of problems aren't caught either, but it's always in the back of the head to prevent / limit.
__________________
Your post count means nothing.
|