Re: http referer
| From: | Stan F | Date: | Sun, 27 Feb 2005 01:52:29 +0000 |
| Subject: | Re: http referer | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-209525@lists.php.net to get a copy of this message | ||
----- Original Message -----
From: "Sebastian" <sebastian@broadbandgaming.net>
To: <php-general@lists.php.net>
Sent: Saturday, February 26, 2005 8:31 PM
Subject: [PHP] http referer
> ok, so i made a file manager and i need to prevent people from linking
> directly to files that do not come from another part of the site.
>
> i know i can use http_referer, but i wonder how fool proof it is, i dont
> want to spit out errors to a legit user that actually came from a valid
page
> before trying to access the file url. some people have said http_referer
is
> not always accurate.
Never rely on it. It might be not set at all, it's easy to spoof. I would
think about sessions here.
btw this topic has been discussed much, so you probably should STFA.
>
> any examples, snips, would be helpful.
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>