If you change your header to pragma-nocache, he should not be able to see the source to know what elements he needs for a <method=get>. Or you could also use a session to hide the variables?
Joe Pemberton wrote: > Is there a function call to figure out how a variable was registered? I am writing >a page that handles a form and I need to know whether or not a variable was created >using the GET or POST method (I don't want the user to be able to to >'foo.php?var=value' and mess with the results) > - - Joe > > [EMAIL PROTECTED] -- John Taylor-Johnston ----------------------------------------------------------------------------- ' ' ' Collège de Sherbrooke: ô¿ô http://www.collegesherbrooke.qc.ca/languesmodernes/ - Université de Sherbrooke: http://compcanlit.ca/ 819-569-2064 -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
