-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Yannick Benoit wrote:
I want to create a script which post a form with fields to fill in but
with a timer so that if the person fills the form in 10 seconds he gets a
specific score but if its in 20 then the score is lower etc...
I can put on a countdown or timer using javascript but i dont know how to
grab the time from that timer and post it with the form.
Don't. Trust the time on the webserver, not the time given by that
javascript counter.
(By "time on the webserver" I mean "store the time when the page has been
served the last time to that user, and compare it against the time when the
data has been submitted").
Don't ever rely on user inputted data. Specially if that data come from
javascript stuff. It can be easily tampered with.
- --
- ----------------------------------
Iván Sánchez Ortega -i-punto-sanchez--arroba-mirame-punto-net
You never have to change anything you got up in the middle of the night
to write.
-- Saul Bellow
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFEB4vz3jc Q2mg3Pc8RAhW3AJ 4iczyz6viY2pA3i cX5r7htUXaY0ACf bMYG
Ugc0WGY0p0E/PkQSMDSnz+s=
=YQdG
-----END PGP SIGNATURE-----