Hidden form fields are evil

Yesterday I went over some code in a project I’m currently working on with a colleague of mine. It’s an administrative tool, where we allow the user to save his own icon for an item to have better visual hints in the items list. This icon is stored directly in the database, which greatly reduces […]

Categories: Technik  |   Tags: hidden input, input type="hidden", seccurity, web app security  |  No Comments »