Re: http referer

From: Date: Sun, 27 Feb 2005 01:52:29 +0000
Subject: Re: http referer
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-209525@lists.php.net to get a copy of this message
----- Original Message ----- From: "Sebastian" <sebastian@broadbandgaming.net> To: <php-general@lists.php.net> Sent: Saturday, February 26, 2005 8:31 PM Subject: [PHP] http referer > ok, so i made a file manager and i need to prevent people from linking > directly to files that do not come from another part of the site. > > i know i can use http_referer, but i wonder how fool proof it is, i dont > want to spit out errors to a legit user that actually came from a valid page > before trying to access the file url. some people have said http_referer is > not always accurate. Never rely on it. It might be not set at all, it's easy to spoof. I would think about sessions here. btw this topic has been discussed much, so you probably should STFA. > > any examples, snips, would be helpful. > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > >

« previous php.general (#209525) next »