Re: Securing Forms???
| From: | Nobody Special | Date: | Thu, 19 Aug 2004 01:03:34 +0000 |
| Subject: | Re: Securing Forms??? | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-194220@lists.php.net to get a copy of this message | ||
On Fri, 13 Aug 2004 18:57:24 -0400, Gerard Samuel
<php-general@trini0.org> wrote:
> Chris Shiflett wrote:
> > You might find these resources helpful:
> >
> >
> > http://education.nyphp.org/phundamentals/PH_spoofed_submission.php
> >
> > http://shiflett.org/talks/oscon2004/php-security/36
> >
> > Hope that helps.
> >
>
> Thanks. These are doable..
>
With curl I can automate pretty much any web site, you can't tell the
difference between it and somebody using a browser. You are better
off worrying about sanatizing the incoming data then securing the
form. Let your session handling and login stuff take care of that.
--
Use Linux.