Re: script to script
| From: | heinisch at creaction dot de | Date: | Wed, 08 May 2002 22:57:28 +0000 |
| Subject: | Re: script to script | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-96729@lists.php.net to get a copy of this message | ||
At 08.05.2002 11:38, you wrote:
I have a form that links from a form on an html page then to a confirm page, I have error validation on each page however on the final page I would like to have it verify where the data is coming from... i.e. I would like to make sure it is coming from the confirm page on the same server. If anyone has an idea of how to accomplish this that would be great. Thanks in advance, jasyou have mysql installed? if your server makes the first page, include a hidden unique id > md5 (uniqid (rand())) <, which is stored in the db also. Give this number a short expiration time. Now, if the user sends the results from page 1 and comes to page 2, check if there´s the hidden id within the timeframe (look for different time zones when you implement this, already asked on this list) if the value is not in the db, it´s not from your server. Also have a look at $HTTP_REFERRER, -not shure now-, but should give you additional informations. HTH Oliver