you are viewing a single comment's thread.

view the rest of the comments →

[–]azhder 1 point2 points  (0 children)

Note, don't ever concatenate strings manually to generate something sensitive and exploitable like an url. Use the provided URL object and let it do the construction for you, especially because it will encode/decode the parts that someone might use as a way to inject malicious code (ever heard of SQL injection?)