Relying on cgi.http_referrer is not a good idea anyway because any cgi var
that begins with http_ can be spoofed using CFHTTP. It really only helps to
keep the newbies honest.
Sorry I could be of more help with the securing the form.
Duane
> -----Original Message-----
> From: Greg Wolfinger [mailto:[EMAIL PROTECTED]]
> Sent: Friday, February 23, 2001 2:55 PM
> To: CF-Talk
> Subject: preventing hacked forms
>
>
> Hey Guys:
>
> I was wondering what the best method is to confirm that the form
> variable that are submitted were from a page from the server and
> not some hacker downloading the source and changing stuff. I
> know you can use CGI.HTTP_REFERER, however this is not always
> passed by all browsers. Any Ideas.
>
> Thanx
>
> --=@ greg @=--
>
>
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
