Posted by Ivan Marsh on 12/17/56 11:54
On Mon, 31 Jul 2006 20:03:02 +0000, Katash wrote:
> ***newbie_request***
>
> I have a simple program that inserts user details into a MySQL database
> - The form validation is dealt with by another program that contains the
> html form
>
> I would like to ensure no-one can create a separate form and post to my
> input program thereby bypassing my validation functions
>
> My question is :- Is there a way I check that the $_POST vars have come
> from a php file on the webserver and halt the sql input with a security
> warning if they're coming from a different source?
>
> Perhaps I'm approaching this from the wrong angle - Am I?
How would a form from another source have access to your database server?
--
The USA Patriot Act is the most unpatriotic act in American history.
Feingold-Obama '08 - Because the Constitution isn't history,
It's the law.
Navigation:
[Reply to this message]
|