store the time in the users session and check it on post/get

On Tue, Oct 7, 2008 at 5:42 AM, Brent Baisley <[EMAIL PROTECTED]> wrote:

> If you put a time stamp in the form, you should also include a "check"
> to make sure the time was not changed and/or forged (which is very
> easy to do).
> An easy way to do this is to include another hidden field that is an
> md5 hash of the time plus a secret pass phrase that only resides on
> the server. When the form is submitted, you take the submitted time
> plus the pass phrase md5 hash and make sure it matches the submitted
> md5 hash.
> Ideally your md5 hash would use more than 2 pieces of information, but
> you get the idea.
>
> Brent Baisley
>
> On Mon, Oct 6, 2008 at 9:10 PM, Rolan Yang <[EMAIL PROTECTED]> wrote:
> > Put the timestamp of when the page was first served as a hidden variable
> in
> > the form. Then compare it to the time when it was submitted (after
> > completed).
> >
> > <input type="hidden" name="served" value="<?=time()?>">
> >
> > ~Rolan
> >
> > [EMAIL PROTECTED] wrote:
> >>
> >> Hello NYPHP,
> >>
> >> Greetings to All,
> >>
> >> I need to time how long it takes to fill out a registration form, from
> >> when it is called to submission. I am trying to compare the time frame
> >> difference
> >> between the form being manually filled out versus an automated script.
> >>
> >> Any ideas or direction about how to do this would be enormously
> >> appreciated.
> >>
> >>
> >
> > _______________________________________________
> > New York PHP Community Talk Mailing List
> > http://lists.nyphp.org/mailman/listinfo/talk
> >
> > NYPHPCon 2006 Presentations Online
> > http://www.nyphpcon.com
> >
> > Show Your Participation in New York PHP
> > http://www.nyphp.org/show_participation.php
> >
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>
_______________________________________________
New York PHP Community Talk Mailing List
http://lists.nyphp.org/mailman/listinfo/talk

NYPHPCon 2006 Presentations Online
http://www.nyphpcon.com

Show Your Participation in New York PHP
http://www.nyphp.org/show_participation.php

Reply via email to