Re: Re: disable referer ? (was: Framed & Linked Content)
| From: | Per Jessen | Date: | Tue, 29 Jan 2008 18:48:53 +0000 |
| Subject: | Re: Re: disable referer ? (was: Framed & Linked Content) | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-268265@lists.php.net to get a copy of this message | ||
Robert Cummings wrote:
> Actually, now you made me think on it... the primary reason I disable
> referrer logging is because it will also pass along lovely information
> such as any session ID embedded in the URL. So if you happen to get on
> a malicious site, they could access the account from which you've
> come.
Hmm, interesting idea. I wonder if the sessionid isn't tied to the
IP-address even when it's part of the URL?
Still, I can't help thinking that if this is a serious problem, it would
have been dealt with long ago.
/Per Jessen, Zürich