Re: Re[4]: [PHP] (new question on this) http referer
| From: | Robert Cummings | Date: | Thu, 08 Apr 2004 18:13:27 +0000 |
| Subject: | Re: Re[4]: [PHP] (new question on this) http referer | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-182881@lists.php.net to get a copy of this message | ||
On Thu, 2004-04-08 at 14:07, Richard Davey wrote:
> Hello Robert,
>
> Thursday, April 8, 2004, 7:04:24 PM, you wrote:
>
> RC> I don't think this works in general. For instance some ISPs can have the
> RC> user's IP change between page requests (incuding redirects). AOL is an
> RC> example of such and ISP.
>
> That doesn't make any difference in this instance.
>
> scriptA receives the POST data
> scriptA then in turns POSTs that to scriptB which outputs the result
> back to a variable in scriptA
> scriptA displays it, effectively - the proper page
>
> At no point has the user been redirected anywhere.
Aaah ok. That makes more sense to me :) Sorry was confused by the use of
the word redirect. Thought you were redirecting the user to an alternate
script with the reposted data. I'm not sure I understand how this is
more secure since isn't the data as valid as the first time it was
posted?
Cheers,
Rob.
--
.------------------------------------------------------------.
| InterJinn Application Framework - http://www.interjinn.com
|
:------------------------------------------------------------:
| An application and templating framework for PHP. Boasting |
| a powerful, scalable system for accessing system services |
| such as forms, properties, sessions, and caches. InterJinn |
| also provides an extremely flexible architecture for |
| creating re-usable components quickly and easily. |
`------------------------------------------------------------'