Stop Spoofed Form Submissions

后端 未结 11 967
时光说笑
时光说笑 2020-12-21 13:21

I have a question about stopping spoofed form submissions. How about if by using the $_SERVER[\'HTTP_REFERER\'] I only allow submissions to my forms coming from

11条回答
  •  青春惊慌失措
    2020-12-21 14:08

    Let us be clear: it's technically impossible to prevent spoofed form submissions. Summing it up in one sentence:

    If your browser can do it, everyone can do it.

提交回复
热议问题