Using HTTP_REFERRER to ensure forms posted from server
| From: | Terence | Date: | Wed, 28 Apr 2004 06:57:43 +0000 |
| Subject: | Using HTTP_REFERRER to ensure forms posted from server | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-184832@lists.php.net to get a copy of this message | ||
Dear All,
To avoid malicious users creating their own forms and posting to my site, is
it advisable to use the $_SERVER['HTTP_REFERRER'] to ensure that posted
forms only come from the intended source? Anyone out there using this?
Thanks
Terence