note 47258 deleted from security.variables by didou
| From: | didou@php.net | Date: | Tue, 09 Nov 2004 00:11:44 +0000 |
| Subject: | note 47258 deleted from security.variables by didou | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-80307@lists.php.net to get a copy of this message | ||
Note Submitter: brockn at gmail dot com
----
I would like to know how to verify WHERE data is being submitted from. For example: Lets say I have
a form, a user copies the source and then changes it in some unfavorable way. How can I know that it
is coming from MY DOMAIN NAME. I have used the following:
if(isset($_SERVER['HTTP_REFERER']) && ereg("mydomain.com",
$_SERVER['HTTP_REFERER'])) {
// Seems to validate only good form data
} else {
// User is trying to send me posion???
}
But I do not like it as I feel there is a better way and I am not sure if it will catch all cases,
or even most cases.