Re: Downloding files once
| From: | Curt Zirzow | Date: | Wed, 06 Aug 2003 20:29:47 +0000 |
| Subject: | Re: Downloding files once | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-158546@lists.php.net to get a copy of this message | ||
* Thus wrote Boaz Yahav (berber@netvision.net.il):
> Can you fake a referrer by say,.... using fsockopen() and sending your
> own headers?
Yes, and in fact there are programs designed to work around this
exact (so called) security check.
I've seen hosting services use this method of protecting their
files and usually what happens is the users get programs that make
downloading the files easier than downloading files through a web
browser, thus defeating the whole purpose of the referer checking.
Curt
--
"I used to think I was indecisive, but now I'm not so sure."