Re: http_referer

[Andrew Grosset]

I don't follow...couldn't I just copy the uuid and place it in a hidden field in MY form and submit that?

>Stick a uuid in a hidden field and check that you get the same one back.
>cgi.http_referer can't be trusted as it can be easily spoofed.

---

[Todays Threads] [This Message] [Subscription] [Fast Unsubscribe] [User Settings]

---