$_post

[drag0n]

how is using $_POST more secure?

[GSHelpBoy]

Using $_POST is more secure than $form_field because the user can manually enter the variable into the URL and "trick" your script.

[Weedpacket]

Also the stuff in a POSTED form doesn't end up in your browser's URL history the way stuff in the querystring (GET-submitted form data) does.

[drag0n]

So, the $GET function makes the url string safe, what about the $POST function? How does forms which u enter, lets say your name transfer data? These questions may sound stupid cuz Im a newbie. =)

[feldon23]

Because if you use:

$name
$email
$submit
$othervalue1
$othervalue2

instead of

$POST['name']
$POST['email']
$POST['submit']
$GET['othervalue1']
$_GET['othervalue2']

then I can just do this:

http://www.test.com/yourscript.php?name=elvis&email=[e-mail]
&submit=true&othervalue1=9102&othervalue2=5930

In short, $name, $email, and $submit do not discriminate between sources. $POST will only accept a POST method, $GET will only accept a get method.

[drag0n]

thanks all for responding to my post!