Re: HTTP_REFERER ... ?
| From: | Curt Zirzow | Date: | Wed, 05 May 2004 20:36:06 +0000 |
| Subject: | Re: HTTP_REFERER ... ? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-185481@lists.php.net to get a copy of this message | ||
* Thus wrote Pablo Gosse (gossep@unbc.ca):
> John Nichel wrote:
> > Tristan.Pretty@risk.sungard.com wrote:
> >> Sadly, I get nothing...
> >> the other server I'm talking to is owned by our company, it's a
> >> Lotus Domino server... so in theory, they'll be able to enable this
> >> variable to be passed?
> >
> > I can never remember one day to the other which it is, but I _think_
> > it's the browser which sets/sends the REFERER, not the referring
> > server.
>
> You should avoid using HTTP_REFERER if at all possible. I found out the
> hard way that some firewalls will change HTTP_REFERER to HTTP_WEFERER,
> obfuscate it some other way, or just not set it. This can also be done
> by the browser in some cases.
I guess soon firewall's are going to be pouring you cups of coffee
when it gets empty.
Curt
--
"I used to think I was indecisive, but now I'm not so sure."