什么更安全$ _POST或$ _SESSION？

Question

I'm using the great jquery-file-upload image uploader, but need to store images for different users in subfolders. I can do this either by sending the name of the folder as a $_POST arg to upload.class.php or retrieve the name as a $_SESSION arg.

Is there a preference for security?

Answer 1

If the folder name is to be inputted by the user, it should be in a $_POST variable with an appropriate form.

If it is a variable to be determined by the server, per user, it should be a $_SESSION variable.

There's no question of security here, there's a question of which is more appropriate for the required functionality.