|
|||||||||
|
|||||||||
|
|||||||||
 |
|||||||||
| |
||
|
|
|
|
|||||||||
|
|||||||||
|
|||||||||
|
|||||||||
| |
||
|
|
|
| |||||||||
 |
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
ASP Free Forums Sponsor:
|
|
|
|
#1
February 15th, 2006, 11:58 AM
|
|||
|
|||
|
Please review www.themazecomicstore.com
I'm totally new to web design so if you have any ideas on what I should do with this site please let me know
www.themazecomicstore.com
|
|
#2
February 15th, 2006, 12:04 PM
|
||||
|
||||
|
first of all, prevent all errors like this one:
Quote:
it happened with such URL: http://www.themazecomicstore.com/html/quick_search_results.asp?uid=3921&searchvalue=verotika&pagenumber=1&card=&comic=onk keep in mind that any user can put whatever he want in the URL so you must double check everything you read from there.
|
|
#4
February 15th, 2006, 01:53 PM
|
|||
|
|||
|
well, instead of method=post, use method=get. this will not put the query in the address bar, making it much more difficult for the user to alter the query.
|
|
#6
February 16th, 2006, 07:06 AM
|
||||
|
||||
|
it ok to use the URL, no problem with that. but you have to validate the data sent.
for example, in your code have something like this: Code:
strComic = Request("comic")
If strComic<>"ok" And strComic<>"[another possible value]" And ... Then
Response.Write("invalid value given!!")
Response.END
End If
which means check if the value is any possible value and if not, abort execution.
|
|
| Viewing: ASP Free Forums > Web Design > Site Reviews > Please review www.themazecomicstore.com |
| Thread Tools | Search this Thread |
| Display Modes | Rate This Thread |
|
|
 |
|
|
|
|
|
Del.icio.us
Digg
Google
Spurl
Blink
Furl
Simpy
Y! MyWeb
Linear Mode
