CGI.pm sticky hidden fields: why?

From: wana (ioneabu_at_yahoo.com)
Date: 09/29/04 

Date: 28 Sep 2004 20:20:22 -0700

Is there any justification for the 'stickiness' of hidden fields? A
web page viewer cannot legitimately enter a value into a hidden field,
so why would anyone want to hold over a value to the next page?

I really got stuck on this one for a while because I was creating a
session and passing the session id in a hidden field and it was
getting stuck there and not changing when it was supposed to until I
added -override=>1.

Also, in passing session id via url, Konqueror seems to have a problem
with this. Even with sample code from the Perl and MySQL book, I had
to go to the address bar and press enter each time as if I was typing
in the address with session id each time for it to work. I did not
bother to test this with Netscape since I prefer passing by hidden
field and that seems to work now that I know they are sticky.

Relevant Pages

  • Re: How 2 pass a hidden field string in html form to a php script
    ... If you want to prevent the user from execute the script remotely, ... the less randomness in your hidden field the easier it will be to make remote ... Don't think that the session will be a fool proof protection, ... legitimate user who has this feature disable in the browser. ...
    (alt.php)
  • Re: [PHP] secure alternative to HTTP_REFERER
    ... You could put a hash value into a hidden field on the form, and also store it in the session. ...
    (php.general)
  • Re: keep the reference pointer of an object
    ... There are three ways to maintain session data in web ... keep a session key in your hidden field, ... > to make a hidden value to be passed around, and probbably with cookie to ... cookies are not safer, and only marginally more difficult to be 'seen' ...
    (comp.lang.perl.misc)
  • Re: Perl & Sessions?
    ... If the user alters the session ID in a hidden field, ... If you were using cookies, you would be doing the same ...
    (comp.lang.perl.misc)
  • Re: Passing values FP2K
    ... just get the value of the hidden field from the form ... > Conversation: Passing values FP2K ... > want them to go my order form. ...
    (microsoft.public.frontpage.programming)