CGI.pm sticky hidden fields: why?

From: wana (ioneabu_at_yahoo.com)
Date: 09/29/04 

Date: 28 Sep 2004 20:20:22 -0700

Is there any justification for the 'stickiness' of hidden fields? A
web page viewer cannot legitimately enter a value into a hidden field,
so why would anyone want to hold over a value to the next page?

I really got stuck on this one for a while because I was creating a
session and passing the session id in a hidden field and it was
getting stuck there and not changing when it was supposed to until I
added -override=>1.

Also, in passing session id via url, Konqueror seems to have a problem
with this. Even with sample code from the Perl and MySQL book, I had
to go to the address bar and press enter each time as if I was typing
in the address with session id each time for it to work. I did not
bother to test this with Netscape since I prefer passing by hidden
field and that seems to work now that I know they are sticky.

Relevant Pages

  • Re: [PHP] secure alternative to HTTP_REFERER
    ... You could put a hash value into a hidden field on the form, and also store it in the session. ...
    (php.general)
  • Re: Perl & Sessions?
    ... If the user alters the session ID in a hidden field, ... If you were using cookies, you would be doing the same ...
    (comp.lang.perl.misc)
  • Re: keep the reference pointer of an object
    ... There are three ways to maintain session data in web ... keep a session key in your hidden field, ... > to make a hidden value to be passed around, and probbably with cookie to ... cookies are not safer, and only marginally more difficult to be 'seen' ...
    (comp.lang.perl.misc)
  • Re: akt. Focus von einem WebControl merken und wieder setzten
    ... Nein, weil Du vom Client, keinen Zugriff auf die Session, sehrwohl aber ... auf ein hidden field hast. ... aber bitte keinen neuen Thread aufmachen. ...
    (microsoft.public.de.german.entwickler.dotnet.asp)
  • Re: akt. Focus von einem WebControl merken und wieder setzten
    ... > Nein, weil Du vom Client, keinen Zugriff auf die Session, sehrwohl ... > auf ein hidden field hast. ... aber bitte keinen neuen Thread aufmachen. ...
    (microsoft.public.de.german.entwickler.dotnet.asp)