2 replies to this topic

[PaulD]

Hi

I have just written a contact form but it is still not particularly secure. I want to add a variable to the form that gets checked against the session data so that I am sure the request has actually come from a page on my site.

Is there a way to add data to the session in that manner?

The only alternative I can think of is to create a new table and write the variable to the table, but that seems a lot of work, deleting all the old entries etc and seems more efficient to add it to the session data.

This may not be the right way to go about this but without it I don't want to post the snippet to the library.

I only really learned about this using codeigniter, where it kindly takes care of doing all that for you, adding the hidden fields and the session data and checking it automatically - which has proved very handy.

Thanks in advance,

Paul.

[-Ed-]

Hi Paul,

Sorry for the late responce, am in Denmsrk for vacation

I think there should be a way you can get the session number.
that way you should be able to se a hidden imput parameter with the session number.

I have to think about the session check though, but that should not be to complicated, if you can be sure the serverside can read the session to, and know what sessions it has running.

Still could be tricky

[Ralph]

You can add any data you want too the session object... I save and retrieve data to|from sessions all the time... I even have a pair of class functions that can store and retrieve form "state" which I use on more complex pages...