Notes posted by RurouniJones

RSS feed
June 7, 2010
2 thanks

No security

One important thing to remember is that this is NOT hidden in the source code and can be modified by an evil user so all input in a hidden field should be considered as untrustworthy and checked just like a visible field.