RE: [PHP] Munging hidden/form variables

[Boget, Chris]

> Is there any way to defend against this?  Is there any way
> to ensure that when a form is submitted that the submission
> request originated from your site/domain and not somewhere
> else?

Knowing that $HTTP_REFERER cannot be relied on as containing
valid data (as some browsers don't support it)?

Chris