Re: How to figure out from which domain the PHP script was called?
| From: | Joshua Moore-Oliva | Date: | Wed, 19 Mar 2003 22:24:14 +0000 |
| Subject: | Re: How to figure out from which domain the PHP script was called? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-140346@lists.php.net to get a copy of this message | ||
YOu can check the HTTP_REFERRER... but really though, that's no security.
Anyone can use Curl to simulate a request that looks like it comes from your
domain.
All security measures needs to happen on the server, not from what the users
web browser gives you.
Josh.
On March 19, 2003 05:13 pm, Philarmon wrote:
> Hi !
>
> Im a completely PHP newbie, so please spare me :)
>
> Is there any way to figure out from which page a script was called ?
>
> I want that the PHP script check it and will be executed only if the
> request came from my domain (so nobody could execute it by typing its name
> in the browser or something like that).
>
> Thanks for answering !
>
> Cheers,
> Philarmon