Rent A Coder - prevent autosubmitters

Show Bid Request

prevent autosubmitters
Bid Request Id: 2918

Bookmark in my 'To Do' list

Posted by:	bobsspot (3 ratings) (Software buyer rating 10)
Non-action Ratio:	Good - 50%
Posted:	Sep 24, 2001 5:28:01 PM EDT
Bidding Closes:	Oct 8, 2001 5:29:19 PM EDT
Viewed (by coders):	412 times

Phase:	100% of work completed and accepted. Coder has been paid.
Max Accepted Bid:	Bidding is closed
Project Type:	Very Small Business Project: under $100 (USD)
Bidding Type:	Open Auction
Categories:	Web, Perl

Enter chat room for this bid request
(0 active users at Mar 23, 2003 11:02:06 PM EDT)

Description:
I currently have a perl/cgi script that is executed
from 'form action=script.cgi' in an html page. The
script.cgi adds information collected on the html page
to a data file. I am having a problem with people
circumventing my html file in some way. I need a
simple way to make sure that the script.cgi is getting
its information from MY html page on MY server, not
from someone trying to use some kind of automated form
completion tool or something. And if they are not
going it correctly, send then to the right page.

Deliverables:
Complete and fully-functional working program(s) in executable form as well as complete source code of all work done.

Remember that contacting the other party outside of the site (by email, phone, etc.) on all business projects < $500 (before the buyer's money is escrowed) is a violation of both the software buyer and seller agreements. We monitor all site activity for such violations and can instantly expel transgressers on the spot, so we thank you in advance for your cooperation. If you notice a violation please help out the site and report it. Thanks for your help.

Bidding/Comments:

All monetary amounts on the site are in United States dollars.
Rent a Coder is a closed auction, so coders can only see their own bids and comments. Buyers can view every posting made on their bid requests.

See all rejected bids (and all comments)

Name Bid Amount
Date Coder Rating

This bid was accepted by the buyer!

cyber_goofy
(12 ratings)
in Mesa, Arizona
United States
Bid id: 24,623

$35 (USD) Sep 25, 2001
4:25:20 PM EDT 9.08
(Superb)

As a first level I would ensure that information is being sent via POST and not GET. That stops most of it.

Secondly, I would put a dynamically generated hidden in the html page and have the cgi test it.

Should make it very difficult to spoof.