Re: Re: Enabling HTTP_REFERER
| From: | Paul Chvostek | Date: | Tue, 11 Mar 2003 22:58:44 +0000 |
| Subject: | Re: Re: Enabling HTTP_REFERER | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-139196@lists.php.net to get a copy of this message | ||
Check out http://www.it.ca/software/noleech-light
It can still be circumvented by a sophisticated leech, since the REFERER
field is supplied by the client, but I've got another one I wrote which
gets used in conjunction with another script to dynamically build
references to files that expire after a period of time, so that if
someone tries to load a file more than a few minutes after loading the
page that points to it, the download will fail. I'm not distributing
that one publically, but it can be available privately for a fee.
p
On Tue, Mar 11, 2003 at 03:29:39PM -0500, Stephen wrote:
>
> I think that solves all my problems then. I was doing a <meta> redirect.
> Could that be causing the problem? How else could I overcome this problem?
> I'm trying to make a good anti leech system.
>
> Thanks,
> Stephen Craton
> http://www.melchior.us
>
>
> ----- Original Message -----
> From: "Paul Chvostek" <paul+php@it.ca>
> To: "Stephen" <webmaster@melchior.us>
> Cc: "Niels Andersen" <haj@zhat.dk>; "PHP List"
> <php-general@lists.php.net>
> Sent: Tuesday, March 11, 2003 1:02 PM
> Subject: Re: [PHP] Re: Enabling HTTP_REFERER
>
>
>
> Niels was right on the money.
>
> If you just typed the URL in the address bar, then HTTP_REFERER will not
> be set. For that variable to be set, you must visit the URL as a result
> of clicking a link on another page.
>
> p
>
> On Tue, Mar 11, 2003 at 12:27:15PM -0500, Stephen wrote:
> >
> > Yes, and I tried going by just typing the URL in the address bar.
> >
> > Either way, the HTTP_REFERER variable should have atleast appeared in the
> > print_r() function I ran.
> >
> > Thanks,
> > Stephen Craton
> > http://www.melchior.us
> >
> >
> > ----- Original Message -----
> > From: "Niels Andersen" <haj@zhat.dk>
> > To: <php-general@lists.php.net>
> > Sent: Tuesday, March 11, 2003 7:57 AM
> > Subject: [PHP] Re: Enabling HTTP_REFERER
> >
> >
> > I don't mean any disrespect, but I just want to check that the basics are
> > OK, sometimes I forget stuff like that myself: Did you click a link to go
> to
> > your test page?
> >
> > "Stephen" <webmaster@melchior.us> wrote in message
> > news:000a01c2e767$78e24e20$0500a8c0@melchior...
> > For some reason my webhost doesn't allow the HTTP_REFERER variable. I call
> > it up and it's empty, so I did a print_r($HTTP_SERVER_VARS); and there
> > wasn't a variable called HTTP_REFERER. I've heard that some servers
> disable
> > it. Since I have a dedicated server, how can I enable this variable again?
>
> --
> Paul Chvostek <paul@it.ca>
> Operations / Abuse / Whatever
> it.canada, hosting and development ¥
> Kâxâ$ ËÇOvwŠhttp://www.it.ca/
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
--
Paul Chvostek <paul@it.ca>
Operations / Abuse / Whatever
it.canada, hosting and development http://www.it.ca/