RE: [PHP] extracting the file name from the referrer
| From: | Richard Lynch | Date: | Mon, 20 Nov 2006 22:44:51 +0000 |
| Subject: | RE: [PHP] extracting the file name from the referrer | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-244906@lists.php.net to get a copy of this message | ||
On Fri, November 17, 2006 5:54 pm, John wrote:
> a) a form was submitted
> b) a processing flag was previously set to process
> c) the form/data being submitted/processed is from the correct page -
> which
> was where the referring url came in.
When you send out the FORM, include a
<INPUT TYPE="HIDDEN" NAME="token" VALUE="[random value here]" />
Store that random token in your $_SESSION or database or have the
squirrels [*] remember it for you.
Then, when they POST, check that they are presenting an existing token
from your $_SESSION, database, or squirrels nut-store.
Not, like, squirrel mail or anything, but actual squirrles. You know,
like rats with bushy tails. :-)
--
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some starving artist.
http://cdbaby.com/browse/from/lynch
Yeah, I get a buck. So?