Re: Form security
| From: | Peter Dudley | Date: | Thu, 24 May 2001 17:17:51 +0000 |
| Subject: | Re: Form security | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-54248@lists.php.net to get a copy of this message | ||
Are you using sessions? You can register a tracking variable on the form
page and then check that variable on the processing page. If the posted
data comes from any page other than the one that you want it to, the
variable will not be set. Not 100% sure, but I think this covers what
you've asked.
Pete.
""phpman"" <info@graphicon.nu> wrote in message
news:9ejeqp$gm7$1@toye.p.sourceforge.net...
> Other then checking the referer (to make sure the posted data came from
the
> right page) and user agent (to see if it exists), is there any other way
to secure a
> form from having other forms submitting to it?
>
> -dave