Re: security
| From: | David Robley | Date: | Fri, 23 Mar 2001 04:17:37 +0000 |
| Subject: | Re: security | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-45243@lists.php.net to get a copy of this message | ||
On Fri, 23 Mar 2001 14:18, Randy Johnson wrote:
> In PHP how do I make it so a script cannot be called from somewhere
> else other than from my server.
>
> Example
>
> http://domain.com/mail.php is my mail script that is called
> by
> http://domain.com/signup.html
>
> How do I make it so
>
> http://somebodyelsesdomain.com/signup.html cannot call the
> mail.php
> script.
>
>
> thanks
>
> Randy
If you are using the POST method to pass data, set a hidden value in
signup.html which you can test for in mail.php. Not a perfect method, as
doing a 'view source' on signup.html will reveal it.
--
David Robley | WEBMASTER & Mail List Admin
RESEARCH CENTRE FOR INJURY STUDIES | http://www.nisu.flinders.edu.au/
AusEinet | http://auseinet.flinders.edu.au/
Flinders University, ADELAIDE, SOUTH AUSTRALIA