my $ret="";
foreach my $choice (@choices) {
if ($open && exists $config{cgiurl}) {
- $ret.="<form action=\"$config{cgiurl}\">\n";
+ # use POST to avoid robots
+ $ret.="<form method=\"POST\" action=\"$config{cgiurl}\">\n";
}
my $percent=$total > 0 ? int($choices{$choice} / $total * 100) : 0;
$ret.="<p>\n";
done -- [[Joey]]
-Not quite; [the `<form>` `method` attribute defaults to GET](http://www.w3.org/TR/html401/interact/forms.html#adef-method). The forms each need the attribute `method="POST"`.
\ No newline at end of file
+Not quite; [the `<form>` `method` attribute defaults to GET](http://www.w3.org/TR/html401/interact/forms.html#adef-method). The forms each need the attribute `method="POST"`.
+
+[[bugs/done]] -- [[Joey]]
OpenID, and see how OpenID works for you. And let me know your feelings about
making such a switch. --[[Joey]]
-[[poll 10 "Accept only OpenID for logins" 6 "Accept only password logins" 8 "Accept both"]]
+[[poll 9 "Accept only OpenID for logins" 5 "Accept only password logins" 7 "Accept both"]]