I know this is just a quick measure, but isn't the whole idea to not
emit the code in plain text on the form?  It's really very easy to
scrape it out.

--Wez.

On Tue, 20 Jul 2004 14:32:44 -0400, Daniel Convissor
<[EMAIL PROTECTED]> wrote:

> It's pretty crude.  All it does is set a session var with a segment of the
> microtime then asks the user to confirm that number.  So, if a bot tries
> to submit directly via POST, the value won't be set, so they get rejected.

-- 
PHP Internals - PHP Runtime Development Mailing List
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to