explanation only

[red fox]

hi
i need explanation to this code i read it on php manual
like action and the value "y' all things like this

Code: Select all

<form method="post" action="attacktarget?errors=Y&amp;showerrors=1&amp;debug=1">
<input type="hidden" name="errors" value="Y" />
<input type="hidden" name="showerrors" value="1" />
<input type="hidden" name="debug" value="1" />
</form>

[Coditor]

This is regarding security.

If you use common variables like $debug or $showerrors in your code, and you have enabled register_globals, a hacker can build an HTML page with the form as you displayed, and submit it to your PHP script. The variables from the form are automatically loaded into your php script and suddenly you're showing debug output and/or errors...

Another good reason to disable register_globals and to hide error messages by default.

Coditor