Re: is there a better way to know from which php file the request comes from ??

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, 2009-08-17 at 19:04 +0200, Ralph Deffke wrote:
> If u need a solution to know where the request comes from on a certain
> secure level u can use cookies.
> 
> u might also have run into pages on the web giving u hard readable images u
> have to put into a form field. toghether with cookies these design gives u
> 1000% from where the form data come.
> 
> depends what security level u whant to implement
> 
> regards
> ralph_deffke@xxxxxxxx
> 
> 
> "nashrul" <anas_aviv@xxxxxxxxx> wrote in message
> news:25003587.post@xxxxxxxxxxxxxxxxxx
> >
> > This is a newbie question...
> > Let's say there are 3 php files, page1.php, page2.php and page3.php. Form
> > submission from page1.php or page2.php will take user to page3.php.
> > I know that we can use parameter that is appended in the action attribute
> of
> > the form (e.g <FORM METHOD=POST ACTION="tes.php?var1=val1">)
> > But I think, appending this parameter is transparent to the user, since
> it's
> > visible in the url.
> > And I think we can also use the hidden field or (form name ??.).
> > So which one is most secured and better ??
> > Thanks..
> > -- 
> > View this message in context:
> http://www.nabble.com/is-there-a-better-way-to-know-from-which-php-file-the-request-comes-from----tp25003587p25003587.html
> > Sent from the PHP - General mailing list archive at Nabble.com.
> >
> 
> 
> 
Nothing that comes from the client can be considered secure, so cookies
are out too I'm afraid.

Thanks,
Ash
http://www.ashleysheridan.co.uk




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux