Re: $_SERVER[HTTP_REFERER]
| From: | Justin Patrin | Date: | Thu, 08 Jul 2004 17:11:39 +0000 |
| Subject: | Re: $_SERVER[HTTP_REFERER] | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-189981@lists.php.net to get a copy of this message | ||
On Thu, 08 Jul 2004 11:49:24 +0200, Christophe Chisogne
<christophe@publicityweb.com> wrote:
> Shaun a écrit :
> > after lots of investigation it appears that it is just my laptop that won't
> > disply the variable, maybe because I am using Norton Firewall?
>
> Possible. The REFERER HTTP field is OPTIONAL
> -- See http1.1 spec (rfc2616) or this list archives.
> So it's not a field anyone should rely upon.
> More and more software (firewall, proxies, privacy tools)
> just dont send it, or send it modified
> (same thing for the UserAgent field, which can even
> be modified on several browsers)
>
> > reason, is there an alternative server variable?
>
> No. It can be empty or even (easily) faked.
>
This is a variable that the client send you explicitly. Some firewall
software blocks sending it. You can even send a fake value. Basically,
you can't rely on it.
--
DB_DataObject_FormBuilder - The database at your fingertips
http://pear.php.net/package/DB_DataObject_FormBuilder
paperCrane --Justin Patrin--