in reply to passing values
How about an id that is actually unique?
perl -MData::UUID -le 'print Data::UUID->new->create_str'With CGI.pm-
use strict; use warnings; use CGI qw(:standard); use Data::UUID; print header(), start_html(), h1("MAI FORMZ"), start_form(), textfield(-name => "testing"), hidden(-name => "s3cr37", -value => Data::UUID->new->create_str), end_form(), end_html();
Gives-
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-U +S"> <head> <title>Untitled Document</title> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1 +" /> </head> <body> <h1>MAI FORMZ</h1><form method="post" action="http://localhost" enctyp +e="multipart/form-data"> <input type="text" name="testing" /><input type="hidden" name="s3cr37 +" value="7D632A06-1A7B-11DF-B0FC-8F43FFA00377" /></form> </body> </html>
Hidden fields are hackable. So don't count on it being a secret or something the user can't twiddle.
|
|---|
| Replies are listed 'Best First'. | |
|---|---|
|
Re^2: passing values
by hekkuviik (Initiate) on Feb 15, 2010 at 22:36 UTC | |
by Your Mother (Archbishop) on Feb 15, 2010 at 23:23 UTC | |
by hekkuviik (Initiate) on Feb 16, 2010 at 00:30 UTC |