Re: Quickform security question

From: Date: Thu, 29 Sep 2005 19:52:16 +0000
Subject: Re: Quickform security question
References: 1  Groups: php.pear.general 
Request: Send a blank email to pear-general+get-21156@lists.php.net to get a copy of this message
--- Alexey Borzov <borz_off@cs.msu.su> wrote: > Hi, > > l Burnerheimerton wrote: > > Can a malicious user compose a fake submission, > using > > telnet or some other means, and bypass Quickform > > validation? > > Can I have some stuff you smoke there? > Here are some other sites worth reading about spoofed form submission. My basic question is to see if Quickform addresses this issue or do I need to take separate steps. http://www.nyphp.org/phundamentals/spoofed_submission.php http://phpsec.org/projects/guide/2.html http://talks.php.net/show/oscon2004-php-security/21 ______________________________________________________ Yahoo! for Good Donate to the Hurricane Katrina relief effort. http://store.yahoo.com/redcross-donate3/

« previous php.pear.general (#21156) next »