oh..help in security php with forms..

soniared2002

Hi all,
I have posted a similar message yesterday, but i thought i will give more details today:
i have php web site: it works fine..on low secuiry IE settings.
However, when i go to medium security settings instead of sending to the forms that there are..it refreshes the page it is on.
I have no idea what did i do wrong..and what is the problem.
Did anyone had similar problems?
I am using apache, windows xp, php, mysql..
Please help.
i was reading information about p3p documentation..but it didn't really help me.
Thank you very much.
Regards.
Sofia

soniared2002

Also, to notice that i dont have a problem when i am viewing the web page from the local network, only from internet (outside).
HWO CAN I FIX IT?
somethign in php.ini settings?
HELP!

trooper

You'll need to post some code for us lot to take a look at

soniared2002

For example..this is one of my forms:
<table width="857" border="0" cellpadding="0" cellspacing="0" height="454">
<tr>
<td width="230" height="454"> </td>
<td width="627" align="left" valign="top" bgcolor="#000000" height="454">
<font face="Courier" color="#E090CE"> 
<FORM method=post action="joinsubmitted.php">
<p style="margin-top: 0; margin-bottom: 0">COMPLETE THE INFORMATIN BELOW:
() indicates mandatory fields.<sup> </sup> </p>
<p style="margin-top: 0; margin-bottom: 0"> </p>
<p style="margin-top: 0; margin-bottom: 0"><sup> </sup>First Name:  
<input hidden name = "first" TYPE ="TEXT" size="20">
       </p>
<p style="margin-top: 0; margin-bottom: 0"><sup> </sup>Last Name:   
<input hidden name ="last" TYPE ="TEXT" size="20">
</p>
<p style="margin-top: 0; margin-bottom: 0"><sup> </sup>Address:     
<input hidden name ="address" TYPE ="TEXT" size="50">
<br>
<sup> </sup>City:        
<input hidden name ="city" TYPE ="TEXT" size="20">
<br>
<sup> </sup>Country:     
<input hidden name ="country" TYPE ="TEXT" size="20">
<br>
<sup> </sup>Postal Code: 
<input name ="postal" TYPE ="TEXT" size="20">
<br>
<sup> </sup>Phone:       
<input hidden name ="phone" TYPE ="TEXT" size="20">
</p>
<p style="margin-top: 0; margin-bottom: 0"><sup> </sup>Email:       
<input hidden name ="email" TYPE ="TEXT" size="50">
</p>
<p style="margin-top: 0; margin-bottom: 0"> </p>
<p style="margin-top: 0; margin-bottom: 0">  Your Email Address will
be used as a LOGIN. </p>
<p style="margin-top: 0; margin-bottom: 0"><sup> </sup>Please create
a password for future use.</p>
<p style="margin-top: 0; margin-bottom: 0">   Maximum size of six
(6) characters:
<input hidden name ="password" TYPE ="TEXT" size="6">
</p>
<p style="margin-top: 0; margin-bottom: 0"> </p>
<p style="margin-top: 0; margin-bottom: 0">Enter a SECRET QUESTION AND
ANSWER :</p>
<p style="margin-top: 0; margin-bottom: 0" align="left">Question:      
<input hidden name ="question" size="50">
<br>
Answer:        
<input hidden name ="answer" TYPE ="TEXT" size="50">
 </p>
<p style="margin-top: 10; margin-bottom: 0 align=left">                     
<input class="submittype" name="submit" type=submit value="SUBMIT">
   
<input class="submittype" name="reset" type=reset value="RESET">
</FORM>
It doesn't submit on medium settings internet options..only on low ones..

soniared2002

Hi all,
I was just thinking..could it be that my server set up wrongly? or internet connection?
Thanx

bad76

Hi,
the problem may be in your browser settings.
Check security option and be sure that on med level
of internet security setting is enabled default setting
and not custom settings.

tools/options/security
first icon at top (internet setting)
select med level on slide bar
button at bottom/right must be disabled

axo

i think it is a matter of your IE configuration ... just check if the option "send unencrypted form data " or so (my IE is in german, so i can't tell you how it is in your browser) is active.

soniared2002

Hi All,
Still having the same problem even taht my p3p configurations are correct.
I am starting to think it is not IE problem but my hosting configurations.
Is it possible? Can a my host server not accept cookies from outside? Network?
Thanx..

bad76

Not, i don't think.
Cookies are a client-side thing...

Try from other PC or get any other browser, like ns, opera or other. I think it will work...

soniared2002

it gets even funnier..a friend of mine who is using IE 6 on Win 98 can access my web page and submit on medium level withotu any problems..
it is in windows xp IE6 who doesn't want to submit.
Any ideas now?

soniared2002

Hi all,
this is the link, please tell me waht do you think and if it is working for you to submit :
http://pics.swprints.com
Go to JOIN US
in join us-> follow join
and in the form..you dont' even need to enter anyting..just pr3ess submit adn what does it give you?
SEE!
HELP!

soniared2002

Oh, and it doesn't work with IE 5.5 neither...win 98

bad76

Ie 5 & win2000 ... work fine. And even on my old NS4.5
(i'm testing all my code on this browser, surely it's a free-browser code 😃)

The only thing i can think is that you have to look your security setting. I can't help more, sorry.

(Change it one to one and try...)

see you

soniared2002

Hi all, Morning.
I'm finally sure that the problem is the thrid-party cookies that are automatically blocked in medium security level in IE6, to solve taht i must write a custom p3p policy.
Hope that will work.
Also, i suggest (if anyone will have similar problems in the future), read the book on p3p policies (it is great) :
"Web Privacy with P3P by Lorrie Faith Cranor "out since2002.

Wish me luck!
Good day everyone!

Sofia