I've seen a form that has the following hidden elements. The first one is obviously a security token for CSRF, but what's the second one. It's more or less an image. What added security would it give me? and how do I generate one?
<input type="hidden" value="G2k2DNFer3z2NR0zYO" name="key">
<input type="hidden" value="☃" name="_face">
<input type="hidden" value="home" name="ref_source">
That SNOWMAN is actually a character in Unicode (U+2603) and it is probably used to test whether the client uses a proper character encoding (probably UTF-8) or not, for example:
$isUtf8 = $_POST['_face'] === "\xE2\x98\x83";
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With