Re: Securing Forms???
| From: | Curt Zirzow | Date: | Fri, 13 Aug 2004 20:02:24 +0000 |
| Subject: | Re: Securing Forms??? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-193754@lists.php.net to get a copy of this message | ||
* Thus wrote Gerard Samuel:
> I've read (at least on 2 occasions) that one can secure their forms, to
> ensure that the form came from the site, and not via a script kiddie.
> Not the method where one puts a graphic of random text to copy to the
> form, but via a hidden field.
> It has to do with having a hidden field of data, that must match some
> data, when the form is posted.
> I've been mulling over this for some time to figure out how its
> possible, (as I haven't seen a live example of it).
> Could anyone point me to an example to how this can be done, (if its
> even possible)???
> Thanks for your input...
http://shiflett.org/php-security.pdf
Curt
--
First, let me assure you that this is not one of those shady pyramid schemes
you've been hearing about. No, sir. Our model is the trapezoid!