> Anyone. For instance, I could post a form to your site which has
> anything I want on it. That's a very common way hackers get into systems.




But, sorry for my little experience, my forms only work if you logged
in (and you are a registered user and a session is active...). For
sure, I should understand how hackers do what they do...




> And that means you'll never get it in the future?



absolutely not



> Always validate your data.



ok, thanks