What are some tips you know about adding security to processing forms such as registration forms, generators, login forms, contact forms, etc? This is because I am thinking that a basic PHP form can be too unsecured from exploits such as spam submitting, spam registration, etc..
PHP Forms security
| wangbin218200 wrote: |
| What are some tips you know about adding security to processing forms such as registration forms, generators, login forms, contact forms, etc? This is because I am thinking that a basic PHP form can be too unsecured from exploits such as spam submitting, spam registration, etc.. |
NEVER TRUST ANYTHING COMING FROM THE USER
This includes
a) JavaScript validations
b) hidden fields in forms
c) cookie values
d) the "HTTP_REFERER" value
 |