Re: [Phpwebsite-developers] While we are talking about comments

[Don S. <do...@se...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Shaun Murray wrote:
> Ensuring all posted form data comes from a browser and not a bot is
> another method used by some systems. Adding these into phpWebSite
> instead of into something like Apache's mod_security would be useful.

b2evolution also does check the referrer when a comment is submitted.,
and it has to be the comment page itself.

- --
Don Seiler
do...@se...

Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xFC87F041
Fingerprint: 0B56 50D5 E91E 4D4C 83B7  207C 76AC 5DA2 FC87 F041
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFDoHYKdqxdovyH8EERAm5LAJ4q1DyFHq7aWXW53Jn+SAxKSje7qACgpFh/
yPZ6aRhepzuCGn06QLOK08g=
=V0Qh
-----END PGP SIGNATURE-----