forms - Is it possible get URL value from where Value posted In PHP? -
i working on form posting value domain domain (for ex: www.something1.com
www.something2.com
).
how can validate request posted www.something1.com
? or somewhere else.
putting comments in reply form, don't believe current answers address main issue. want validate source domain form appears on when submitted domain.
the short reply no, cannot validate (at to the lowest degree security reasons). alternative available give first domain $_server['http_referer']
, however, according php manual:
the address of page (if any) referred user agent current page. set user agent. not user agents set this, , provide ability modify http_referer feature. in short, cannot trusted.
the problem resides in fact forms submitted client, , all info sent 'server2' can/will modified malicious user around security/validation may have in place. other alternative set validation needs submitted form, way create anywhere close effective alter it, , alter often. (ie, maybe every minute?). no matter add together needs submitted - malicious user has total command on sent.
php forms post
No comments:
Post a Comment