Posted by The Natural Philosopher on 09/28/72 12:02
Greg N. wrote:
> flowover wrote:
>
>> Never assume the end user does not have 'access' to values that you
>> echo as hidden fields. Security disaster waiting to happen.
>
> It's not that the data being passed is in any way secret. But i's just
> too much text for GET.
>
> Anyway, does anybody know of a way to submit a hidden form without a
> submit button and without Javascript?
>
Well cookies. I.e. sessions.Or use GET.
Store all the data on the server and give it a tag/sesion ID, and the
next page that gets invoked pass that tag id along and read all the data
off the server
Navigation:
[Reply to this message]
|