Posting only from my page

Hi, how can I secure posting only from my page?

I use FORM POST method and I want to be sure that no one can POST
the same parameters from a third party call (site).

Is it possible? How can I hide parameters to post in my source?

Thanks for any help...

 

Typically this is done via CSRF protection. A hidden token field in the form that is then compared to a session value. The token is only valid for one page load. Google for examples.

 

You must check refer and you can use cookies or sessions for security also captcha can help you!

 

Thanks to your suggestion I have combined the following code, it works perfectly for me, what do you think about? Did you encounter any empty referrer situation?

if (substr($_SERVER['HTTP_REFERER'],0,24) == 'http://www.hotbounce.com')
{ echo 'ok'; }
else
{ echo 'block'; }

 

You should also allow empty referrers, some firewalls block referrer data. At least they used to.

 

make a captcha.