ExpressionEngine CMS
Open, Free, Amazing

Thread

This is an archived forum and the content is probably no longer relevant, but is provided here for posterity.

The active forums are here.

Hiding hidden form fields from "view source"

February 17, 2011 6:29pm

Subscribe [1]
  • #1 / Feb 17, 2011 6:29pm

    Argyll

    67 posts

    I’m converting some forms over from Freeform to an external database service. I don’t have control over the processing script. Is there any way PHP or EE can be used to obfuscate hidden form fields from someone looking at the source code, and still have the form submit ok? Everything I’ve tried still places the data in the clear.

  • #2 / Feb 18, 2011 4:16am

    Ingmar

    29245 posts

    About the only way I can think of is to have PHP (or MySQL) encrypt the content of these fields. They’d still show up in the hidden fields but be indecipherable.

  • #3 / Feb 18, 2011 8:54am

    Argyll

    67 posts

    A PHP-only solution would be great, BUT, I don’t understand how the data gets decrypted before the form processing script gets it.

  • #4 / Feb 18, 2011 9:30am

    Ingmar

    29245 posts

    Depending on where it comes from and the rest of the setup I’m suggesting it’s not decrypted at that point, at all, but stored in the database in encrypted form. You can decrypt it upon retrieval or at some later point. There are MySQL functions to do that, too.

.(JavaScript must be enabled to view this email address)

ExpressionEngine News!

#eecms, #events, #releases