 A Submitted Field Doesn't Match The Select List |
|
|
|
|
  |
 Jan 4 2007, 02:12 PM
Post
#1
|
|
|
Premium Member  Group: Members Posts: 250 Joined: 6-July 06 From: The net (or at least that's what my family says) Member No.: 14,330  |
I have a select list of cities which is about 10 cities.
I am getting a number of submissions (likely spams all from the same source) where the submitted value isn't from my list. I was wondering how this is possible? |
 |
 
|
|
Jan 4 2007, 07:06 PM
Post
#2
|
|
|
Member [ Level 2 ] Group: Members Posts: 71 Joined: 16-December 06 Member No.: 18,419 |
It's really quite simple. When people submit information through your forms, they are not bound to the information you make possible because it is mere HTML and there is no checking as to the validity of the data. For example, you might have:
CODE <form action="post.php" method=POST> <select name=hello> <option value=NY>New York</option> <option value=BF>Buffalo</option> <option value=CY>Calgary</option> </select> <submit value="Submit"> </form> If someone were to duplicate that form info and post to the same page, they could change the select to a simple text box, where they could put anything they want. Of course, a more realistic way would be that they probably have a program that automatically posts random data with the names you provide to the page you provide. |
|
|
|
|
Jan 7 2007, 06:51 AM
Post
#3
|
|
|
Super Member  Group: [HOSTED] Posts: 802 Joined: 8-April 06 From: Lima - Peru Member No.: 12,579 myCENTs:17.43 |
Another way is to simply send the data embeding in the URL, something like this will work:
http://your.domain.com/page.php?param1=val...p;param2=value2 Best regards, |
|
|
|
|
Similar Topics
|
Lo-Fi Version | Time is now: 2nd December 2008 - 11:18 AM |