>> The last part is why this is a problem. > $_POST isn't the problem No, it isn't. That's why I specifically said "The last part is the problem", referring t

>> The last part is why this is a problem. > $_POST isn't the problem No, it isn't. That's why I specifically said "The last part is the problem", referring to "as long as you're doing proper checks." Specifically, my point is that you should not rely on people 'doing the proper checks' because people make mistakes, thus you want to reduce the amount of situations where people are given the opportunity to make those mistakes. There are a lot of situations in PHP where you need to 'do the proper checks' for no reason other than bad language design, and that is what makes PHP a bad language.