Re: Quickform security question
| From: | l Burnerheimerton | Date: | Thu, 29 Sep 2005 19:52:16 +0000 |
| Subject: | Re: Quickform security question | ||
| References: | 1 | Groups: | php.pear.general |
| Request: | Send a blank email to pear-general+get-21156@lists.php.net to get a copy of this message | ||
--- Alexey Borzov <borz_off@cs.msu.su> wrote:
> Hi,
>
> l Burnerheimerton wrote:
> > Can a malicious user compose a fake submission,
> using
> > telnet or some other means, and bypass Quickform
> > validation?
>
> Can I have some stuff you smoke there?
>
Here are some other sites worth reading about spoofed
form submission. My basic question is to see if
Quickform addresses this issue or do I need to take
separate steps.
http://www.nyphp.org/phundamentals/spoofed_submission.php
http://phpsec.org/projects/guide/2.html
http://talks.php.net/show/oscon2004-php-security/21
______________________________________________________
Yahoo! for Good
Donate to the Hurricane Katrina relief effort.
http://store.yahoo.com/redcross-donate3/