Process only scripts submitted from same server

[alexmac]

Hi all,
How is it possible to check that ASPs script process only stuff that originates from the same server. For example I do not want users copying a form page then editing it on their own computer and then submitting to my script.

The way I have come up with is something like this:

http_refer=request.serverVariables("http_referer")
'hostname is cut out from full path using string functions
if http_refer<>"www.whatever.com" then response.write("not equal")

Is there a better way of doing this?

Thanks,

Alex

[JoshT]

if they are smart enough to modify the form then I'd assume they are smart enough to fake the HTTP_REFERER. You probably could use Session variables to keep track instead, but be safe and make sure you have good input validation.

[alexmac]

Yeah good point. I guess ideally all validation would be done server side then it docent matter what the submitted form contains.

Alex