PDA

View Full Version : Form Security


scatter
December 10th, 2005, 05:14 PM
Hi there,

Here's a form security article from sitepoint.com. It was featured in one of thier newsletters (Design View).

http://www.sitepoint.com/article/toughen-forms-security-image



Enjoy,

~Mike

12Wonder
December 10th, 2005, 06:09 PM
Mike,

Image security is a good start because it does add that extra layer of protection. Unfortunately there are spammers/hackers that know how to get around image security. Not sure how hard this one would be to get around because I haven't looked too deeply into this one yet, but it's something to keep under consideration -- in other words, image security is not something to rely on 100% by itself.

The only way to prevent against hijacking is to validate and test EVERY FIELD in a form. Not just the header fields, since spammers now have methods of hijacking any field in a form.

I have sent you (via email) a much safer php form script you can use. It's almost paranoid in its validations. It doesn't have the image class but you can add that if you want.

Anne