Posted: Sun Sep 03, 2006 6:15 pm
JustinMs66, I'm not withholding information to <span style='color:blue' title='I'm naughty, are you naughty?'>smurf</span> you off here. If I knew an answer I'd tell you.
Fact is I don't know a simple solution to what you want to achieve here.
If you wanted to prevent JavaScript from hitting your server you would have to write a something to read text files and test if it was valid JavaScript and it would have to be bloody comprehensive as wel otherwise there would be loop holes.
I'm pretty sure you can't just check the mime type of input files because that is provided by the client (Others: am I right on this?). And anyway even if that is server side I'm sure there are plenty of ways of fooling it.
Fact is I don't know a simple solution to what you want to achieve here.
If you wanted to prevent JavaScript from hitting your server you would have to write a something to read text files and test if it was valid JavaScript and it would have to be bloody comprehensive as wel otherwise there would be loop holes.
I'm pretty sure you can't just check the mime type of input files because that is provided by the client (Others: am I right on this?). And anyway even if that is server side I'm sure there are plenty of ways of fooling it.
How did they manage that? Until you know the answer to that question you are really wasting your time here.and yes, i'm sorry for being rude, but my website was hacked a couple days ago...everything deleted.
