in reply to Re^3: Encrypt web form values
in thread Encrypt web form values

Thanks, fmerges.

So the recipient of the web page has no way of tampering with the session data, am I right? Could you clarify "if you're not allowing it from the server side code."? What does that mean?

Replies are listed 'Best First'.
Re^5: Encrypt web form values
by fmerges (Chaplain) on Dec 06, 2008 at 15:12 UTC

    Hi,

    No the client cannot directly tamper.

    Check out the tutorial, CGI::Session::Tutorial it explains you all the details.

    BTW take also a look at this module Data::FormValidator and taint mode.

    Regards,

    fmerges at irc.freenode.net
      The tutorial was helpful. I've yet to check out Data::ForValidator. It's reassuring to know the client cannot tamper with the data. I'll go in that direction. Thank you :)