Re: XSS via curl
| From: | Silvio Porcellana [tradeOver] | Date: | Wed, 30 Nov 2005 15:49:09 +0000 |
| Subject: | Re: XSS via curl | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-226646@lists.php.net to get a copy of this message | ||
Sandy Keathley wrote:
>
> Is there a way to detect that a script is being accessed by curl, and
> not by a browser? ENV ($_SERVER) variables won't work, as
> those can be forged.
>
Use a CAPTCHA test:
http://en.wikipedia.org/wiki/Captcha
HTH, cheers!
Silvio
--
tradeOver | http://www.tradeover.net
....ready to become the King of the World?