Search Webmaster Help and Solution

security question - passing sql values in a url

Here is what I am dealing with. Three pages that work in this sequence:

form --> results page -->content page

Each of the above pages needs to remember the selections made in the form on the first page.



What I am doing currently:
Passing a chunk of a sql statement as a url variable from the results page to the content page.


Why I think its ok:
1. I am only using a sql account with READ only rights.

2. Nothing in the database anywhere is private information.


Am I nuts?? Should I not be doing this? Here is what I am dealing with. Three pages that work in this sequence:

form --> results page -->content page

Each of the above pages needs to remember the selections made in the form on the first page.



What I am doing currently:
Passing a chunk of a sql statement as a url variable from the results page to the content page.


Why I think its ok:
1. I am only using a sql account with READ only rights.

2. Nothing in the database anywhere is private information.


Am I nuts?? Should I not be doing this?

View Complete Thread with Replies

Related Items

Query failed: connection to localhost:3354 failed (errno=111, msg=Connection refused).