Quote:
Originally Posted by linkoraclehero
First off, you DON'T need to send the password OR username, you make a config PHP file for that; Sending ANYTHING as get vars (The vars after ?, seperated by &s), is INSECURE, and downright retarded.
|
Eh, it is not really any more or less secure than opening a socket to your sql server and shooting data down it.