If you put a time stamp in the form, you should also include a "check" to make sure the time was not changed and/or forged (which is very easy to do). An easy way to do this is to include another hidden field that is an md5 hash of the time plus a secret pass phrase that only resides on the server. When the form is submitted, you take the submitted time plus the pass phrase md5 hash and make sure it matches the submitted md5 hash. Ideally your md5 hash would use more than 2 pieces of information, but you get the idea.
Brent Baisley On Mon, Oct 6, 2008 at 9:10 PM, Rolan Yang <[EMAIL PROTECTED]> wrote: > Put the timestamp of when the page was first served as a hidden variable in > the form. Then compare it to the time when it was submitted (after > completed). > > <input type="hidden" name="served" value="<?=time()?>"> > > ~Rolan > > [EMAIL PROTECTED] wrote: >> >> Hello NYPHP, >> >> Greetings to All, >> >> I need to time how long it takes to fill out a registration form, from >> when it is called to submission. I am trying to compare the time frame >> difference >> between the form being manually filled out versus an automated script. >> >> Any ideas or direction about how to do this would be enormously >> appreciated. >> >> > > _______________________________________________ > New York PHP Community Talk Mailing List > http://lists.nyphp.org/mailman/listinfo/talk > > NYPHPCon 2006 Presentations Online > http://www.nyphpcon.com > > Show Your Participation in New York PHP > http://www.nyphp.org/show_participation.php > _______________________________________________ New York PHP Community Talk Mailing List http://lists.nyphp.org/mailman/listinfo/talk NYPHPCon 2006 Presentations Online http://www.nyphpcon.com Show Your Participation in New York PHP http://www.nyphp.org/show_participation.php
