Add to top of page to prevent remote postings coming from another form, maybe ignoring your validations, and can post to database and shouldn’t be able to….!
1 2 3 4 5 6 |
echo $ref = $_SERVER['HTTP_REFERER']; if($ref !== 'http://localhost/goodpage.php') { die("Hotlinking not permitted"); } |