Re: Follow up - PHP Security problems

Good question - Instead of referencing the actual filename of the image in the source file (from here known as "SrcFile"), reference a file (from here known as "ImgFile") that will grab the image. Use an encryption method in the SrcFile to create a value that corresponds to the image you want to display, and pass that value to the ImgFile. The ImgFile will decrypt the code, grab the appropriate image, and return the image to the SrcFile. So, instead of seeing <img src="one.gif"><img src="two.gif"> in the SrcFile, all you see is <img src="ImgFile.php3?img=102342143"><img src="ImgFile.php3?img=342014253"> - and those "img=" values are constantly changing! There is more tech speak, but I'll spare you. > In the meantime we are >> going to create something simular to altavista and yahoo verification check. >> Basically an image with different letters and they have to put the correct >> letters in. They only have to do this once and then the account is activated >> and can submit tickets. >> >> If any one know where I can get info on creating this process or one simular >> with PHP that would be great. > > > =I have to ask: if such miscreants can set up an automated system which will > even respond to email (text) > registration numbers/web pages, how will sending the same as graphics help? > > =Surely if they can write a program to work off "123" they can also work off > <img src="one.gif"> <img > src="two.gif"> <img src="three.gif">? > > =dn >