Re: Re: PHP: Cool PHP Tips
| From: | Johannes Froemter | Date: | Sun, 25 Nov 2001 19:14:01 +0000 |
| Subject: | Re: Re: PHP: Cool PHP Tips | ||
| References: | 1 2 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969339271@lists.php.net to get a copy of this message | ||
>[Using HTTP_REFERER for security purposes]
>
>Simple, effective, and safe.
Simple, but unsafe. $HTTP_REFERER is not suited for security
related purposes, because
- it's optional, you cannot rely on it's presence
- it's easy to manipulate
--
Johannes