If it's important enough you can pass a form variable with an encoded string that
uniquely identifies THIS form that you handed out. When the form is submitted you
validate that the encoded string is the same one you gave out, and you don't let them
be used twice.
At 02:54 PM 2/23/01 -0500, Greg Wolfinger wrote:
>Hey Guys:
>
>I was wondering what the best method is to confirm that the form variable that are
>submitted were from a page from the server and not some hacker downloading the source
>and changing stuff. I know you can use CGI.HTTP_REFERER, however this is not always
>passed by all browsers. Any Ideas.
>
>Thanx
>
>--=@ greg @=--
>
>
>
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists
