use strict;
use warnings;
use CGI qw(:standard);
use Data::UUID;
print
header(),
start_html(),
h1("MAI FORMZ"),
start_form(),
textfield(-name => "testing"),
hidden(-name => "s3cr37", -value => Data::UUID->new->create_str),
end_form(),
end_html();
Gives-
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-U
+S">
<head>
<title>Untitled Document</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1
+" />
</head>
<body>
<h1>MAI FORMZ</h1><form method="post" action="http://localhost" enctyp
+e="multipart/form-data">
<input type="text" name="testing" /><input type="hidden" name="s3cr37
+" value="7D632A06-1A7B-11DF-B0FC-8F43FFA00377" /></form>
</body>
</html>
Hidden fields are hackable. So don't count on it being a secret or something the user can't twiddle.
|