search

kyprizel / testcookie-nginx-module

simple robot mitigation module using cookie based challenge/response technique. Not supported any more.
http://kyprizel.github.com/testcookie-nginx-module/
524 stars 139 forks source link

GET arg string for cookie validation #6

Closed MAXDARK closed 11 years ago

MAXDARK commented 11 years ago

Hello,

I saw you have a setting for cookie validation, which uses an argument string, that will be sent back to the server, in order to count how much times, it attempted to set the cookie.

Can't you make a mod to this work in POST way ? so we add the hidden field to the html ?

This would be great !!!

Thank You and Great Work !!

kyprizel commented 11 years ago

It'll change the request method if will be used for GET requests. For the POST requests i'll need to store request body and looks a bit complicated for lightweight module.

MAXDARK commented 11 years ago

Hello,

Sure but would allow a more elegant solution, and in a way that would be completely transparent too, but maybe you didn't understood, what i've wanted, i just wanted instead of you taking the arg check from $_GET, you would be taking it from $_POST, it would be perfect :) !

kyprizel commented 11 years ago

Sorry, but POST handling is too complicated and will not be added to this module.