|
|
|||||||||
|
|||||||||
|
|||||||||
| |
||
| |||||||||
![]() |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
#1
|
|||
|
|||
|
Please review www.themazecomicstore.com
I'm totally new to web design so if you have any ideas on what I should do with this site please let me know
www.themazecomicstore.com |
|
#2
|
||||
|
||||
|
first of all, prevent all errors like this one:
Quote:
it happened with such URL: http://www.themazecomicstore.com/html/quick_search_results.asp?uid=3921&searchvalue=verotika&pagenumber=1&card=&comic=onk keep in mind that any user can put whatever he want in the URL so you must double check everything you read from there. |
|
#3
|
|||
|
|||
|
Is there another way of creating the links? I'm a total novice when it comes to all this so any pointers you can give would be appreciated
|
|
#4
|
|||
|
|||
|
well, instead of method=post, use method=get. this will not put the query in the address bar, making it much more difficult for the user to alter the query.
|
|
#5
|
|||
|
|||
|
Could you give me an example? I don't use method=post I just use < a href=
|
|
#6
|
||||
|
||||
|
it ok to use the URL, no problem with that. but you have to validate the data sent.
for example, in your code have something like this: Code:
strComic = Request("comic")
If strComic<>"ok" And strComic<>"[another possible value]" And ... Then
Response.Write("invalid value given!!")
Response.END
End If
which means check if the value is any possible value and if not, abort execution. |
![]() |
| Viewing: ASP Free Forums > Web Design > Site Reviews > Please review www.themazecomicstore.com |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
|
|