MY_Form_Validation w/ spam and CSRF protection

MY_Form_Validation w/ spam and CSRF protection

El Forum
Guest

06-08-2010, 05:27 AM

[eluser]n0xie[/eluser]
[quote author="WanWizard" date="1276012351"]
If you also make the form field name random, how do you figure out which of the elements in the POST contains your nonce? Do you simply check the existence of the generated name (and if it exists, check the nonce)?[/quote]
Exactly.

Messages In This Thread

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 06-07-2010, 10:50 AM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 06-07-2010, 02:28 PM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 06-07-2010, 04:16 PM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 06-08-2010, 03:17 AM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 06-08-2010, 04:00 AM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 06-08-2010, 04:52 AM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 06-08-2010, 05:27 AM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 06-08-2010, 06:55 AM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 07-09-2010, 04:49 PM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 07-10-2010, 12:31 AM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 07-10-2010, 01:46 AM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 07-10-2010, 02:48 AM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 07-10-2010, 11:34 AM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 07-11-2010, 10:53 AM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 07-12-2010, 03:50 AM

MY_Form_Validation w/ spam and CSRF protection - by El Forum - 07-12-2010, 10:16 AM