Stop Spoofed Form Submissions

后端 未结 11 925
时光说笑
时光说笑 2020-12-21 13:21

I have a question about stopping spoofed form submissions. How about if by using the $_SERVER[\'HTTP_REFERER\'] I only allow submissions to my forms coming from

11条回答
  •  春和景丽
    2020-12-21 14:16

    The referrer is easily spoofed.

    You should validate the form best you can to catch out stupid bots, and possibly use a server side CAPTCHA.

提交回复
热议问题