Re: Passing values

Cant you check the HTTP_REFERER global var for the 2nd and 3rd pages, if its not from your domain, then you know the user modified your page and is attempting to submit false data. I use hidden fields for all my variable passing. None of it is important stuff, no passwords or any user data, just state and titles for the pages. If you really have a need where you are worried about your hidden variables being compromised then you shouldnt use them. The HTML spec provides them to be exactly that, passing data that is "insignificant" between pages. Just my $0.02 /Cody Caughlan Chad Day wrote: > I always see this reply.. pass hidden form fields.. but users can download > the html, modify it client-side, and send back false data.. so I don't think > this is a very secure way of passing data between pages. What would work > better (besides session variables?)? > > Chad > > -----Original Message----- > From: Matt Williams [mailto:matt@yewlands.com] > Sent: Monday, August 21, 2000 10:48 AM > To: Adv. Systems Design; php-db@lists.php.net > Subject: RE: [PHP-DB] Passing values > > Hi > > You could pass them in hidden form fields if the user is entering data into > a form > > M@ > > > -----Original Message----- > > From: Adv. Systems Design [mailto:asd_2000@yahoo.com] > > Sent: Monday, August 21, 2000 03:36 > > To: php-db@lists.php.net > > Subject: [PHP-DB] Passing values > > > > > > PHP newbie here...I am very encouraged by what I have > > already learned to do with PHP and MySQL...however I > > am stuck now in understanding how variables can be > > passed from one page to another. I have a 3 page > > setup, where a selection on page1 gives me query info > > for page2, where the user makes more input, and > > finally results displayed on page3. Getting data from > > page1 to 2 is no problem...as getting data from page 2 > > to 3 is automatic as well...but how do I include the > > value from page1 to go to page3? > > > > Any examples or pointers to resources greatly > > appreciated... > > > > Thanks > > > > > > __________________________________________________ > > Do You Yahoo!? > > Yahoo! Mail - Free email you can access from anywhere! > > http://mail.yahoo.com/ > > > > -- > > PHP Database Mailing List (http://www.php.net/) > > To unsubscribe, e-mail: php-db-unsubscribe@lists.php.net > > For additional commands, e-mail: php-db-help@lists.php.net > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > > -- > PHP Database Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-db-unsubscribe@lists.php.net > For additional commands, e-mail: php-db-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > -- > PHP Database Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-db-unsubscribe@lists.php.net > For additional commands, e-mail: php-db-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net -- Cody Caughlan -codyc@cisco.com- Cisco Systems Web/Database Engineer phone: (408) 525-6029 Enterprise Line of Business pager: (408) 951-9949