Does your form field call the same thing as mysql, really represents a security risk?

Is there a reason why you should or shouldn't name the form fields exactly the same as the HTML fields?

<input type="text" name="my_field_1" id="my_field_1" /> --> mysql row my_field_1

or

<input type="text" name="myField1" id="myField1" /> --> mysql row my_field_1

The only thing I can think of is probably naming conventions for HTML and Mysql (possibly a personal preference), as well as easy injection prevention (obviously, the field name should change more ... but first all values ​​should be checked in anyway + using a real escape line).

+5
source share
6 answers

, , , , , "" .

, , . , , , .

, , . , - , , . .

+2

, , , . , , SQL , ? , TamperData, firefox, , ?

, , , , !

+2

, ( ). ? , , , ;)
, , .

, , .

0

. .

, , "", , MySQL .

0

, 100% SQL. , / .

0

, , , - .

- , , - , ( ).

0

All Articles