Topic awaiting preservation: The point of Session & Request.Form (ASP) (Page 1 of 1)

Hi, people. How are you?
I just made small thing using ASP and MS Access.
It is something like editing customer list on the browser.
When I update db, I use Request.form to pass the variables.
But my friend is using session variable to do the same thing.
He said that session is better cuz of the security reason.
is that the point to use Session variable rather than posting form value using .form method? Thanks.

Never trust user input - ever.
- Session-variables should be better in this case, but it kinda depends on how the actual coding of the app looks..

(^-^)b

Thanks for yoru reply, mate. I am wondering....

quote:

---

Never trust user input - ever.

---

What do you mean???
When I pass the value of the form, which the end user input, what kinds thing do I have to consider to make data trustwothy then????
Humm...