Re: HTML_Quickform: how does quickform prevent spoofed form submissions?

From: Date: Sat, 01 Jul 2006 05:40:40 +0000
Subject: Re: HTML_Quickform: how does quickform prevent spoofed form submissions?
References: 1  Groups: php.pear.general 
Request: Send a blank email to pear-general+get-24526@lists.php.net to get a copy of this message
On 6/30/06, l Burnerheimerton <lburnerheimerton@yahoo.com> wrote:
Does Quickform have any built-in security check for Spoofed Form Submissions?
It is pretty much impossible to protect against any kind of spoofed request. You should always check the vailidity, correctness, and completeness of any data passed to your script from the client-side as, not only can it be spoofed, the user could alter the data at any stage (see MS Fiddler or the Proxomitron for examples). -- Justin Patrin

« previous php.pear.general (#24526) next »