Re: forms and IP numbers

This would be just as bad, as he could open up a socket faking a referer. What you really need are data integrity checks inside the script which posts to the message board on your server. /* Chris Lambert, CTO - chris@whitecrown.net WhiteCrown Networks - More Than White Hats Web Application Security - www.whitecrown.net */ ----- Original Message ----- From: Marc van Duivenvoorde <yhcmarc@gmx.net> To: Php general lijst <php-general@lists.php.net> Sent: Friday, July 13, 2001 6:09 AM Subject: [PHP] forms and IP numbers | A friend of mine found a bug in my messageboard code, this way he can post | with other (than in my database) nicknames from a local form. Now I want to | have the formhandler do a check from where the form is sent. If it is not | sent from my own webserver it has to display an error message. | | Thanks, | | Marc van Duivenvoorde | | | -- | PHP General Mailing List (http://www.php.net/) | To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net | For additional commands, e-mail: php-general-help@lists.php.net | To contact the list administrators, e-mail: php-list-admin@lists.php.net | | |