Tuesday, 15 July 2014

forms - Is it possible get URL value from where Value posted In PHP? -



forms - Is it possible get URL value from where Value posted In PHP? -

i working on form posting value domain domain (for ex: www.something1.com www.something2.com).

how can validate request posted www.something1.com? or somewhere else.

is possible incoming request url? is there other way of validating it?

putting comments in reply form, don't believe current answers address main issue. want validate source domain form appears on when submitted domain.

the short reply no, cannot validate (at to the lowest degree security reasons). alternative available give first domain $_server['http_referer'], however, according php manual:

the address of page (if any) referred user agent current page. set user agent. not user agents set this, , provide ability modify http_referer feature. in short, cannot trusted.

the problem resides in fact forms submitted client, , all info sent 'server2' can/will modified malicious user around security/validation may have in place. other alternative set validation needs submitted form, way create anywhere close effective alter it, , alter often. (ie, maybe every minute?). no matter add together needs submitted - malicious user has total command on sent.

php forms post

No comments:

Post a Comment