SitePoint Sponsor |
|
User Tag List
Results 1 to 5 of 5
-
Sep 21, 2007, 08:37 #1
Request.Params, getting only POST values?
I'm a PHP programmer primarily, and I'm used to passing form values via POST and retrieving them using the $_POST array. I've recently been working on a .NET VB web application and a friend of mine said he can use a web scraping tool on my site. I'm passing variables using POST in my code, so it boggled my mind that he could scrape my site using GET values thrown into the URL field. Apparently the Request.Params array doesn't distinguish between POST and GET, unless I'm just mistaken.
Is there anyway to only retrieve POST values in .NET VB to protect my site from web scraping?
-
Sep 21, 2007, 08:52 #2
- Join Date
- May 2003
- Location
- Washington, DC
- Posts
- 10,653
- Mentioned
- 4 Post(s)
- Tagged
- 0 Thread(s)
Try Request.Form, it has the post variables.
-
Sep 21, 2007, 11:57 #3
-
Sep 21, 2007, 12:06 #4
- Join Date
- May 2003
- Location
- Washington, DC
- Posts
- 10,653
- Mentioned
- 4 Post(s)
- Tagged
- 0 Thread(s)
No, Request.Form is equivalent to $_POST.
Now, if someone figures out you are just looking at POST, they could probably scrape the site anyhow with CURL or other similar tools.
-
Sep 21, 2007, 12:46 #5
Bookmarks