session.referer_check

Hi, I've just seen a oddity in the referer check feature. The algo looks in the $GLOBALS for a variable named HTTP_REFERER. Depending on the variable_order, register_globals and track_vars ini-settings and the sapi module, the referer may be stored in an other place ($HTTP_SERVER_VARS, $HTTP_ENV_VARS, ..) or not in a hash (or even not at all). Probably, there should be another entry in the sapi_module_struct to fetch the referer, to do this more reliable. Just a thought. -Jade. -- =============================================================================== Jade Nicoletti Nicoletti Net Services Tel. 01 240 4774 Geschäftsleitung Postfach 2519 Fax 01 240 4775 System-Administration 8021 Zürich ============================================[ Weitere Infos: http://nns.ch/ ]==