Possible Duplicate:
PHP safe $_GET or not
So I’m going to build a dynamic website that loads content from a db. Of course I will sanitize the data before inserts and such, but I need to mod_rewrite the URLs, so I’m thinking I have to use the $_GET variable. Is this safe to use on modern sites?
As long as you sanitize your data there is no difference between using
$_GET,$_POSTor reading from a file.It’s not where the data is from that you should worry about, but the data itself and its use case.