Request.Params, getting only POST values?

[Gibb]

I'm a PHP programmer primarily, and I'm used to passing form values via POST and retrieving them using the $_POST array. I've recently been working on a .NET VB web application and a friend of mine said he can use a web scraping tool on my site. I'm passing variables using POST in my code, so it boggled my mind that he could scrape my site using GET values thrown into the URL field. Apparently the Request.Params array doesn't distinguish between POST and GET, unless I'm just mistaken.

Is there anyway to only retrieve POST values in .NET VB to protect my site from web scraping?

[wwb_99]

Try Request.Form, it has the post variables.

[Gibb]

Try Request.Form, it has the post variables.

Doesn't Request.Form also contain GET values?

I'm trying to prevent web scraping via URL passed values.

[wwb_99]

No, Request.Form is equivalent to $_POST.

Now, if someone figures out you are just looking at POST, they could probably scrape the site anyhow with CURL or other similar tools.

[Gibb]

No, Request.Form is equivalent to $_POST.

Now, if someone figures out you are just looking at POST, they could probably scrape the site anyhow with CURL or other similar tools.

Great, thanks.

I plan on implementing other safe guards to prevent scraping as well, such as monitoring large numbers of page views within a set time and so forth, but hopefully I'll cut back on some web scraping using Request.Form.