Re: [mod-security-users] Hidden Fields

[Ivan R. <iv...@we...>]

Diego Pellegrino wrote:
> Using mod_security, how can i prevent that users change forms parameters
> in POST requests? is it possible?

  Not possible, unless your hidden form field value is constant (probably
  not the case).

  There's some chance this will be supported in the next release.

-- 
Ivan Ristic, Technical Director
Thinking Stone, http://www.thinkingstone.com
ModSecurity: Open source Web Application Firewall
Apache Security (O'Reilly): http://www.apachesecurity.net