Textbox length security issue?

[TexStar]

Is not having a size length for textboxes a real security issue?

[IKLOP]

There's no security issue with that at all. It might be an issue with not be same same size across all browsers, but that's not much of a problem in most cases.

[TexStar]

I recall reading somewhere that if you DO NOT assign a size for the textbox that you risk having malicious users, whether it be crackers or hackers, etc. entering large amounts of text or even small programs that can be executed.

Any truth to this?

[IKLOP]

Well, it's true that those things could be done, but if you code properly and make checks for possible attacks then it's not a problem at all. The security issue isn't in the length of the text box, it's in the code that deals with what is typed in the text box. And limiting the size of a text box isn't a very good security measure anyway.

[scoutt]

Originally posted by TexStar
I recall reading somewhere that if you DO NOT assign a size for the textbox that you risk having malicious users, whether it be crackers or hackers, etc. entering large amounts of text or even small programs that can be executed.

Any truth to this?
say you limited the size for a textbox. well gues what. I am going to save that form on to my hard drive, edit teh html and take away th esize and run it so it will submit to your page like normal. how secure is that?

iklop is correct, you have to do the check afterwards.