| 
                        Which approach is better for security?
                         
                            I get input from user through a form and then process. For example, Method 1: if $_POST[\'submit\']{
$title = $_POST[\'title\'];
$message = $_POST[\'message\'];
send_message($title, $message);
}
Now
function send_message($title, $message){
$t= secure($title);
$m = secure($message);
---
--
}
Method 2:if $_POST[\'submit\']{
$title = secure($_POST[\'title\']);
$message = secure($_POST[\'message\']);
send_message($title, $message);
}
function send_message($title, $message){
//no need to secure input here as i already did before passing to this function.
}
Please note that in method 1 i did not secure the input, i sent the input as the user submitted it. I will secure it in the send_message function before i insert to database. in Method 2, I first of all secured input and then passed to the function. So my question is that, is there any security risk by passing the inputs in a function as above? Should i secure the inputs before i call the send_message function? Which of the method is more secure? 
                        1 Answer
                     
                            its the same my friend because in the two cases you secure it before the real send                
                         Posted: MacOS 0 of 0 people found this answer helpful. Did you? Yes No | 
© Advanced Web Core. All rights reserved
 
                         
                        








