Search:

No.

I doubt that any changes are needed. They rarely (maybe never) will be on the store side of a site unless they relate to the checkout or the account area, as these are the only places where...

The context here is not obtaining information from a different server, but submitting data from an admin page in a browser back to the site's own server.

Not sure I understand the subtle...

Shortly before he so sadly passed away at the weekend, Clyde Jones and I were looking at the changes needed for his Links Manager. Clyde was a huge supporter of this community, and I'm sure that he...

It's also worth noting that there are some forms in mods that only pass data via the GET array. These need to be encouraged to use the POST array too.

The issue isn't GETs in general. It's limited to GETs that lead directly to a change to the database. These could theoretically be picked up and used out of context, in particular to bypass the...