note 83266 added to security.variables

I'd like to note that the 'easysecure' thing posted below is NOT a secure way to validate that the form was indeed submitted from a browser. In fact, there is NO way you can guarantee that. A smart person with bad intentions can easily parse the HTML page to fetch the generated token and pass it on. The only way to secure your forms is to explicitly check every variable against potentially dangerous values. ---- Server IP: 89.248.170.61 Probable Submitter: 130.89.164.164 ---- Manual Page -- http://www.php.net/manual/en/security.variables.php Edit -- https://master.php.net/note/edit/83266 Del: integrated -- https://master.php.net/note/delete/83266/integrated Del: useless -- https://master.php.net/note/delete/83266/useless Del: bad code -- https://master.php.net/note/delete/83266/bad+code Del: spam -- https://master.php.net/note/delete/83266/spam Del: non-english -- https://master.php.net/note/delete/83266/non-english Del: in docs -- https://master.php.net/note/delete/83266/in+docs Del: other reasons-- https://master.php.net/note/delete/83266 Reject -- https://master.php.net/note/reject/83266 Search -- https://master.php.net/manage/user-notes.php