Preventing Request.Form abuse

Hi,

See the previous thread Request.Form abuse in this newsgroup...

I'm looking for a simple and efficient way to prevent people hijacking the
<form> tags on my websites and using them to send spam. I would imagine
they're using the HttpWebRequest method for this.

Essentially, it would require a property on a WebForm that indicates whether
it is *only* for PostBack (true by default, but configurable), which would
have any client POST request which is not from the URL of the page itself
would be ignored.

Alternatively, a "global" flag which could be set in web.config.

I think this would be of great benefit to everyone, as this sort of attack
is clearly becoming more and more common.

Does anyone have any suggestions for a good way to implement this?

I'm sure, as a group, we could come up with something really solid which
would help us all - as Juan said, we're all up the creek with this.

Let's get our thinking caps on, guys...

Who knows - we might even let Microsoft use it in a future version of
ASP.NET... ;-)

Mark


.

Relevant Pages

  • blacklisted by wikipedia
    ... Wikipedia has blacklisted four websites that describe ritual child ... abuse and extreme child abuse crimes in detail. ... Wikipedia Blacklisted Four Important Websites on Ritual Abuse on July ...
    (sci.anthropology)
  • blacklisted by wikipedia
    ... Wikipedia has blacklisted four websites that describe ritual child ... abuse and extreme child abuse crimes in detail. ... Wikipedia Blacklisted Four Important Websites on Ritual Abuse on July ...
    (soc.rights.human)
  • blacklisted by wikipedia
    ... Wikipedia has blacklisted four websites that describe ritual child ... abuse and extreme child abuse crimes in detail. ... Wikipedia Blacklisted Four Important Websites on Ritual Abuse on July ...
    (sci.psychology.theory)
  • Websites as graphs
    ... The structure of these websites is defined in HTML, the lingua franca for publishing information on the web. ... Since tags are nested in other tags, they are arranged in a hierarchical manner, and that hierarchy can be represented as a graph ... ...
    (uk.adverts.other)
  • Re: SEO and CSS
    ... I have been led to believe by a company specializeing in Search Engine ... that it is good to use <div> tags and absolute ... There's this other thingy out there that you have to have a lot of other websites linking to your site to make it in the top 10. ...
    (comp.infosystems.www.authoring.stylesheets)
Loading