Re: Using HTTP_REFERRER to ensure forms posted from server
| From: | De Greef S�bastien | Date: | Wed, 28 Apr 2004 07:22:33 +0000 |
| Subject: | Re: Using HTTP_REFERRER to ensure forms posted from server | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-184833@lists.php.net to get a copy of this message | ||
Hi
i'm not using it but this should work...
another way is a cookie or work with sessions.
Regards
"Terence" <terence@sunway.edu.my> a écrit dans le message news:
000701c42cee$1fcfb0c0$d62f10ac@sunway.edu.my...
> Dear All,
>
> To avoid malicious users creating their own forms and posting to my site,
is
> it advisable to use the $_SERVER['HTTP_REFERRER'] to ensure that posted
> forms only come from the intended source? Anyone out there using this?
>
> Thanks
> Terence