On Fri, 13 Aug 2004 18:57:24 -0400, Gerard Samuel <[EMAIL PROTECTED]> wrote: > Chris Shiflett wrote: > > You might find these resources helpful: > > > > http://education.nyphp.org/phundamentals/PH_spoofed_submission.php > > > > http://shiflett.org/talks/oscon2004/php-security/36 > > > > Hope that helps. > > > > Thanks. These are doable.. >
With curl I can automate pretty much any web site, you can't tell the difference between it and somebody using a browser. You are better off worrying about sanatizing the incoming data then securing the form. Let your session handling and login stuff take care of that. -- Use Linux. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php