Re: Page Referer question

From: Date: Thu, 12 Aug 2004 22:12:36 +0000
Subject: Re: Page Referer question
References: 1 2 3  Groups: php.general 
Request: Send a blank email to php-general+get-193658@lists.php.net to get a copy of this message
On Thu, 2004-08-12 at 13:55, Justin Patrin wrote: > On Thu, 12 Aug 2004 13:43:04 -0700, Robby Russell <robby@planetargon.com> wrote: > > On Thu, 2004-08-12 at 13:34, Jed R. Brubaker wrote: > > > Hello all. I am looking to create script will detect the page from which the > > > user just came so that after they do something on the current page (login) > > > it will send them back to the page they wanted. I was thinking about > > > $_SERVER['HTTP_REFERER'], but php.net says: > > > > > > 'HTTP_REFERER' > > > > > > The address of the page (if any) which referred the user agent to the > > > current page. This is set by the user agent. Not all user agents will set > > > this, and some provide the ability to modify HTTP_REFERER as a feature. In > > > short, it cannot really be trusted. > > > > > > Is this a big problem? Is there another technique I could use? > > > > > > Thank you all! > > > > If a user takes the time to modify this, should it be a concern? If I > > don't want you to know where I came from and made sure you didn't know, > > what else can you possibly do aside from snoop? ;-) > > > > I'd bet that 99.99% of the people who surf the net do not modify this so > > the exception is very minimal. > > > > Except for those with a firewall that blocks this.... > Ok, so maybe 97.99% ;-p -- /*************************************** * Robby Russell | Owner.Developer.Geek * PLANET ARGON | www.planetargon.com * Portland, OR | robby@planetargon.com * 503.351.4730 | blog.planetargon.com * PHP/PostgreSQL Hosting & Development ****************************************/

Attachment: [application/pgp-signature] This is a digitally signed message part signature.asc
« previous php.general (#193658) next »