Re: Using HTTP_REFERRER to ensure forms posted from server
| From: | De Greef S�bastien | Date: | Wed, 28 Apr 2004 09:25:04 +0000 |
| Subject: | Re: Using HTTP_REFERRER to ensure forms posted from server | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-184851@lists.php.net to get a copy of this message | ||
right, thats why i think you better work with sessions... isn't it ?
"Marek Kilimajer" <kilimajer@webglobe.sk> a écrit dans le message news:
408F6AF6.2060500@webglobe.sk...
> Terence wrote:
> > Dear All,
> >
> > To avoid malicious users creating their own forms and posting to my
site, is
> > it advisable to use the $_SERVER['HTTP_REFERRER'] to ensure that posted
> > forms only come from the intended source? Anyone out there using this?
> >
> > Thanks
> > Terence
> >
>
> Useless, referrer can be also spoofed. And it can prevent users with
> personal privacy tools installed from using your site.