Re: Is it possible to verify that a form submision is not being "spoofed"?
| From: | Justin French | Date: | Wed, 01 May 2002 00:23:36 +0000 |
| Subject: | Re: Is it possible to verify that a form submision is not being "spoofed"? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-95458@lists.php.net to get a copy of this message | ||
In addition to everything else discussed:
1. make sure the referring page (ie, the form) was as expected (ie, an
address you trust). This may block a small % or users who's browser doesn't
set a referrer string.
2. ensure that all values were submitted via $_POST, which will prevent the
user from entering them directly into the URL
Justin French
--------------------
Creative Director
http://Indent.com.au
--------------------