Re[6]: [PHP] (new question on this) http referer
| From: | Richard Davey | Date: | Thu, 08 Apr 2004 18:19:51 +0000 |
| Subject: | Re[6]: [PHP] (new question on this) http referer | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-182882@lists.php.net to get a copy of this message | ||
Hello Robert,
Thursday, April 8, 2004, 7:13:27 PM, you wrote:
RC> Aaah ok. That makes more sense to me :) Sorry was confused by the use of
RC> the word redirect. Thought you were redirecting the user to an alternate
RC> script with the reposted data. I'm not sure I understand how this is
RC> more secure since isn't the data as valid as the first time it was
RC> posted?
It's not about the validity of data, that is handled by the receiving
script - it's about knowing for sure WHERE that form data came from in
the first place. For example it would stop something along the lines
of a user downloading your form, modifying some values and then
posting it from their local box. It could also stop another web-site
automatically posting data to your forms should they mask the referer
value.
Hope that makes more sense.
--
Best regards,
Richard Davey
http://www.phpcommunity.org/wiki/296.html