Re: Using HTTP_REFERRER to ensure forms posted from server
| From: | Marek Kilimajer | Date: | Wed, 28 Apr 2004 08:27:34 +0000 |
| Subject: | Re: Using HTTP_REFERRER to ensure forms posted from server | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-184839@lists.php.net to get a copy of this message | ||
Terence wrote:
Dear All, To avoid malicious users creating their own forms and posting to my site, is it advisable to use the $_SERVER['HTTP_REFERRER'] to ensure that posted forms only come from the intended source? Anyone out there using this? Thanks TerenceUseless, referrer can be also spoofed. And it can prevent users with personal privacy tools installed from using your site.