Re: HTTP_REFERER reliability
| From: | Dan Hardiker | Date: | Sun, 16 Mar 2003 17:15:23 +0000 |
| Subject: | Re: HTTP_REFERER reliability | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-139852@lists.php.net to get a copy of this message | ||
> But the manual says that HTTP_REFERER is unreliable, so I'm
> intrigued to know exactly what the problems are. Any ideas?
The HTTP_REFERER field is retrieved from the "HTTP Referer:" header as
used in the HTTP protocol. This field is set entirely by the client
browser / application retrieving the data. There is nothing to stop the
client from adding malformed, incorrect or spoof data into this field -
and thus possibly faking entry to the data you are protecting.
You cannot rely on this field to be accurate, correct or even populated.
--
Dan Hardiker [dhardiker@staff.firstcreative.net]
ADAM Software & Systems Engineer
First Creative
--
Dan Hardiker [dhardiker@staff.firstcreative.net]
ADAM Software & Systems Engineer
First Creative