but for that i need the script to make a http request in the background without the user seeing the address or domain
and when the user is looking at the page source in browser i don't want to see the address
is it possible
thank you
Moderator: General Moderators
can you give me an adviceKieran Huggins wrote:short answer: You're going about this the wrong way.
long answer: you could find a way of making it really hard for people to figure out the address and what you're doing, but you should definitely think about your business req's some more.
Code: Select all
http://domain.88/add_user?id=<?php " .$cfun_id. "?>&password=<? ".$password."?>Code: Select all
<form action="register.php" method="post">
<form>
Type you CFun! ID:<br />
<input type="text" name="cfun_id">
<br>
Your Name: <br />
<input type="text" name="name"><br />
Choose a password please:<br />
<input type="password" name="pass_word"><br />
<input type="submit" />
</form>Code: Select all
$cfun_id= $_POST['cfun_id'];
$name = $_POST['name'];
$pass_word = $_POST['pass_word'];Code: Select all
http://example.com/plugins/user_reg_del ... &username=<? " .$cfun_id."?>&password=<? ".pass_word."?>&name=<? ".name."?>Code: Select all
IllegalArgumentException
UserNotFoundException
UserAlreadyExistsException
RequestNotAuthorised
UserServiceDisabled
oki just give an exempleKieran Huggins wrote:the second <form> tag is likely causing you some problems
what is suppose to mean ?Kieran Huggins wrote:
the reason is because it's a security breech, the url contains a password and if you have that passwordEverah wrote:@cybernet I think we might be having a hard time understanding your English. I apologize for this.
Can you explain again what exactly you are trying to do and why it requires a background request that your user cannot see in order to do what you want?
got a better ideacybernet wrote:and i can't make a mysql_query because the password has a hash that can't be implemented in php