|
Posted by Ivαn Sαnchez Ortega on 03/03/06 02:21
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Yannick Benoit wrote:
> I want to create a script which post a form with fields to fill in but
> with a timer so that if the person fills the form in 10 seconds he gets a
> specific score but if its in 20 then the score is lower etc...
>
> I can put on a countdown or timer using javascript but i dont know how to
> grab the time from that timer and post it with the form.
Don't. Trust the time on the webserver, not the time given by that
javascript counter.
(By "time on the webserver" I mean "store the time when the page has been
served the last time to that user, and compare it against the time when the
data has been submitted").
Don't ever rely on user inputted data. Specially if that data come from
javascript stuff. It can be easily tampered with.
- --
- ----------------------------------
IvΓ‘n SΓ‘nchez Ortega -i-punto-sanchez--arroba-mirame-punto-net
You never have to change anything you got up in the middle of the night
to write.
-- Saul Bellow
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFEB4vz3jcQ2mg3Pc8RAhW3AJ4iczyz6viY2pA3icX5r7htUXaY0ACfbMYG
Ugc0WGY0p0E/PkQSMDSnz+s=
=YQdG
-----END PGP SIGNATURE-----
[Back to original message]
|