RE: [PHP] HTTP_REFERER ... ?

John Nichel wrote: > Tristan.Pretty@risk.sungard.com wrote: >> Sadly, I get nothing... >> the other server I'm talking to is owned by our company, it's a >> Lotus Domino server... so in theory, they'll be able to enable this >> variable to be passed? > > I can never remember one day to the other which it is, but I _think_ > it's the browser which sets/sends the REFERER, not the referring > server. > > -- > John C. Nichel > KegWorks.com > 716.856.9675 > john@kegworks.com You should avoid using HTTP_REFERER if at all possible. I found out the hard way that some firewalls will change HTTP_REFERER to HTTP_WEFERER, obfuscate it some other way, or just not set it. This can also be done by the browser in some cases. The following is quoted from a previous post by Chris Shifflet: "Referer is just as easy to spoof as the form data you're expecting." HTH. Pablo