I’m working on something that allows users to edit a form they’ve submitted and I have two questions.
-
Say I’m on page viewform.php and the page to edit the form is editform.php. Is it safe to pass the form’s ID through the url and use then use GET. I’ll verify the person trying to access it on editform.php is the person who created it using a session ID tied to the username , set upon logging in.
-
If 1 isn’t a safe method, how can I POST that data (using a submit button I suppose) from viewform.php to editform.php?
Sure,
$_GETis safe as long as there isn’t any sensitive data transferred. An ID is what is commonly used