Re: Re: HTTP_REFERER <-> Norton firewall

<004d01c3221a$affcf2f0$0100a8c0@koch> Martin Christian Koch: >> 1. Only accept requests from your www-server on your pic-server. > > That is exactly what I requested. A method for the pic-server to be > sure it's the www-server which is doing the requesting. Be advised > that the pic-server has other purposes, acting as www-server for > other sites and therefore I can't just let apache only accept > requests from the www-server. You could do a *double* readfile (but remember this puts extra load on the servers). That is, do a readfile from the www to a php-script on the pic. The php-script, in turn, IF THE REQUEST IS FROM THE WWW SERVER, reads a file somewhere on the machine that the general public can't access :). Although, using readfile would hide the address of the pic-server. To check in PHP if the www-server is doing the requesting, compare $_SERVER['remote_addr'] against the www-server's IP address, > >> 2. Do a readfile from your www-server to your pic-server. > > Thanks. > > Martin -- 1.41421356237309504880168872420969807856967187537694 No, it's true that the above isn't not true, unless it is. The search is more profitable than the find. Never, ever back down. ..==// Why not? \\==..