RE: [PHP] Form security

From: Date: Thu, 24 May 2001 17:15:14 +0000
Subject: RE: [PHP] Form security
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-54247@lists.php.net to get a copy of this message
Another way to do this is to have a form element with an odd name and value that you can check for before processing the post. This is not too secure if someone knows the name and value though. In that case you can use the referer _and_ a unique element name and value that is related to the referer. Checking for these items before processing the form should be pretty good. James -----Original Message----- From: phpman [mailto:info@graphicon.nu] Sent: Thursday, May 24, 2001 10:04 AM To: php-general@lists.php.net Subject: [PHP] Form security Since nobody answered my last question (or any of them for that matter). Let me rephrase it a little different. Other then checking the referer (to make sure the posted data came from the right page) and user agent (to see if it exists), is there any other way to secure a form from having other forms submitting to it? -dave -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net

« previous php.general (#54247) next »