Re: Securing Forms???

From: Date: Fri, 13 Aug 2004 20:02:24 +0000
Subject: Re: Securing Forms???
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-193754@lists.php.net to get a copy of this message
* Thus wrote Gerard Samuel: > I've read (at least on 2 occasions) that one can secure their forms, to > ensure that the form came from the site, and not via a script kiddie. > Not the method where one puts a graphic of random text to copy to the > form, but via a hidden field. > It has to do with having a hidden field of data, that must match some > data, when the form is posted. > I've been mulling over this for some time to figure out how its > possible, (as I haven't seen a live example of it). > Could anyone point me to an example to how this can be done, (if its > even possible)??? > Thanks for your input... http://shiflett.org/php-security.pdf Curt -- First, let me assure you that this is not one of those shady pyramid schemes you've been hearing about. No, sir. Our model is the trapezoid!

« previous php.general (#193754) next »