<?xml version="1.0" encoding="UTF-8"?>
<!-- generator="bbPress/1.0.1" -->
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<title>Gravity Support Forums Topic: POST Redirect with Nonces</title>
		<link>https://legacy.forums.gravityhelp.com/topic/post-redirect-with-nonces</link>
		<description>Gravity Support Forums Topic: POST Redirect with Nonces</description>
		<language>en-US</language>
		<pubDate>Sat, 04 Apr 2026 18:29:59 +0000</pubDate>
		<generator>http://bbpress.org/?v=1.0.1</generator>
		<textInput>
			<title><![CDATA[Search]]></title>
			<description><![CDATA[Search all topics from these forums.]]></description>
			<name>q</name>
			<link>https://legacy.forums.gravityhelp.com/search.php</link>
		</textInput>
		<atom:link href="https://legacy.forums.gravityhelp.com/rss/topic/post-redirect-with-nonces" rel="self" type="application/rss+xml" />

		<item>
			<title>Carl Hancock on "POST Redirect with Nonces"</title>
			<link>https://legacy.forums.gravityhelp.com/topic/post-redirect-with-nonces#post-21226</link>
			<pubDate>Wed, 23 Mar 2011 18:46:10 +0000</pubDate>
			<dc:creator>Carl Hancock</dc:creator>
			<guid isPermaLink="false">21226@https://legacy.forums.gravityhelp.com/</guid>
			<description>&#60;p&#62;No, the confirmation redirect only does a redirect and passes the data via query strings.  It isn't technically a GET because it's a redirect, but the data can be accessed like a GET because it's in the query string.&#60;/p&#62;
&#60;p&#62;If you want to post the data to a 3rd party service when the form is submitted you would have to write custom code and use the gform_post_submission hook to customize it to do whatever you want.  Documentation for that hook is here:&#60;/p&#62;
&#60;p&#62;&#60;a href=&#34;http://www.gravityhelp.com/documentation/page/Gform_post_submission&#34; rel=&#34;nofollow&#34;&#62;http://www.gravityhelp.com/documentation/page/Gform_post_submission&#60;/a&#62;
&#60;/p&#62;</description>
		</item>
		<item>
			<title>bizingenuity on "POST Redirect with Nonces"</title>
			<link>https://legacy.forums.gravityhelp.com/topic/post-redirect-with-nonces#post-21176</link>
			<pubDate>Wed, 23 Mar 2011 15:30:11 +0000</pubDate>
			<dc:creator>bizingenuity</dc:creator>
			<guid isPermaLink="false">21176@https://legacy.forums.gravityhelp.com/</guid>
			<description>&#60;p&#62;Was POST ever enabled?  Is there any way to do this?
&#60;/p&#62;</description>
		</item>
		<item>
			<title>Carl Hancock on "POST Redirect with Nonces"</title>
			<link>https://legacy.forums.gravityhelp.com/topic/post-redirect-with-nonces#post-3052</link>
			<pubDate>Sat, 30 Jan 2010 22:01:33 +0000</pubDate>
			<dc:creator>Carl Hancock</dc:creator>
			<guid isPermaLink="false">3052@https://legacy.forums.gravityhelp.com/</guid>
			<description>&#60;p&#62;Very good ideas Ronald.  &#60;/p&#62;
&#60;p&#62;We actually were going to enable posting of data when we initially implemented the redirection functionality, however we went with GET at the time as it would be easier for people to use for simple tasks.  But I agree that POST is something we should add as the security issues need to be taken into account as you pointed out.&#60;/p&#62;
&#60;p&#62;Thanks for the great ideas, keep them coming!
&#60;/p&#62;</description>
		</item>
		<item>
			<title>ronalfy on "POST Redirect with Nonces"</title>
			<link>https://legacy.forums.gravityhelp.com/topic/post-redirect-with-nonces#post-3041</link>
			<pubDate>Sat, 30 Jan 2010 01:14:18 +0000</pubDate>
			<dc:creator>ronalfy</dc:creator>
			<guid isPermaLink="false">3041@https://legacy.forums.gravityhelp.com/</guid>
			<description>&#60;p&#62;This is two feature requests wrapped into one...&#60;/p&#62;
&#60;p&#62;1st, I noticed that GF has a nice GET redirect where you can build your own query.  However, passing GET data to a redirect page and having that data parsed is unsecure since the referrer can't be checked easily.&#60;/p&#62;
&#60;p&#62;It would be &#34;real nice&#34; (perhaps this is added, but can't find it?) if we could build POST variables and have these submitted to a redirect page.&#60;/p&#62;
&#60;p&#62;Which brings me to my second feature request.&#60;/p&#62;
&#60;p&#62;2nd, I propose adding a special hidden field for nonces.  Allow the user to add the string for the nonce, that way the user can check the referer when parsing the passed data.&#60;/p&#62;
&#60;p&#62;Ronald
&#60;/p&#62;</description>
		</item>

	</channel>
</rss>
