NYCPHP Meetup

[Brent Baisley]

If you put a time stamp in the form, you should also include a "check"
to make sure the time was not changed and/or forged (which is very
easy to do).
An easy way to do this is to include another hidden field that is an
md5 hash of the time plus a secret pass phrase that only resides on
the server. When the form is submitted, you take the submitted time
plus the pass phrase md5 hash and make sure it matches the submitted
md5 hash.
Ideally your md5 hash would use more than 2 pieces of information, but
you get the idea.

Brent Baisley

On Mon, Oct 6, 2008 at 9:10 PM, Rolan Yang <rolan at omnistep.com> wrote:
> Put the timestamp of when the page was first served as a hidden variable in
> the form. Then compare it to the time when it was submitted (after
> completed).
>
> <input type="hidden" name="served" value="<?=time()?>">
>
> ~Rolan
>
> mikesz at qualityadvantages.com wrote:
>>
>> Hello NYPHP,
>>
>> Greetings to All,
>>
>> I need to time how long it takes to fill out a registration form, from
>> when it is called to submission. I am trying to compare the time frame
>> difference
>> between the form being manually filled out versus an automated script.
>>
>> Any ideas or direction about how to do this would be enormously
>> appreciated.
>>
>>
>
> _______________________________________________
> New York PHP Community Talk Mailing List
> http://lists.nyphp.org/mailman/listinfo/talk
>
> NYPHPCon 2006 Presentations Online
> http://www.nyphpcon.com
>
> Show Your Participation in New York PHP
> http://www.nyphp.org/show_participation.php
>