Re: Form security

From: Date: Thu, 24 May 2001 17:32:15 +0000
Subject: Re: Form security
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-54253@lists.php.net to get a copy of this message
I'm not trying to keep my script secure, I'm trying to get into another script, using cURL. I sent all of the POST fields, set my REFERER to be their referer page, even set my AGENT to be ie 5 on a Win2K box. Damn script is still not returning the right screen. When I copy the HTML code to my machine and run it locally (adjusting the FORM ACTION= to the remote script url) it works. I can even change the same form around and point it one of my scripts that prints every POST var out, I got them all. I checked for cookies - none. I'm not doing this to do anything illegal. I'm trying to link with this script... http://wwwapps.ups.com/servlet/QCCServlet to get shipping info (their XML integration is impossible with PHP - PHP cannot do it). This makes no sense to me, I can't think of anything I'm missing. I've gone through my code for typos and case sensitivities - even the order the POST vars are sent in is the same! Aaaaaauuugggggghhhh!!!!! -dave ""phpman"" <info@graphicon.nu> wrote in message news:9ejeqp$gm7$1@toye.p.sourceforge.net... > Since nobody answered my last question (or any of them for that matter). Let > me rephrase it a little > different. > > Other then checking the referer (to make sure the posted data came from the > right page) > and user agent (to see if it exists), is there any other way to secure a > form from having other > forms submitting to it? > > -dave > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net >

« previous php.general (#54253) next »