Hello Mike,

MA> Thanks for your tips. I am still concerned that other can use the same HTML
MA> and access the confirmation of a valid user.

Yes, sure, it's possible, if only referer checked.
Not just with HTML but with tiny perl script which
will add correct Referer: to request.
Do you need demonstration ?

-- 
Best regards,
Sergei Kolodka
[EMAIL PROTECTED]

Reply via email to