Sean Corfield wrote: > Suggestion to Matt et al: since all you really need to ensure is that > certain requests came from a POST, you can write a filter (or whatever > equivalent your framework de jour supports) that checks the request > was a POST and encapsulate the logic in that one place (testing > CGI.HTTP_METHOD).
That only checks the request method, not whether individual variables came from the URL or the Form scopes (yes, a request can have both form and URL variables at the same time). Jochem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Create robust enterprise, web RIAs. Upgrade to ColdFusion 8 and integrate with Adobe Flex http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJP Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:291110 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
