On Fri, 13 Aug 2004 18:57:24 -0400, Gerard Samuel
<[EMAIL PROTECTED]> wrote:
> Chris Shiflett wrote:
> > You might find these resources helpful:
> >
> > http://education.nyphp.org/phundamentals/PH_spoofed_submission.php
> >
> > http://shiflett.org/talks/oscon2004/php-security/36
> >
> > Hope that helps.
> >
> 
> Thanks.  These are doable..
> 

With curl I can automate pretty much any web site, you can't tell the
difference between it and somebody using a browser.   You are better
off worrying about sanatizing the incoming data then securing the
form.   Let your session handling and login stuff take care of that.


-- 
Use Linux.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to