RE: [PHP] "Authenticating" across sites/servers
| From: | Boget, Chris | Date: | Tue, 23 Jan 2001 18:25:13 +0000 |
| Subject: | RE: [PHP] "Authenticating" across sites/servers | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-36239@lists.php.net to get a copy of this message | ||
> Also, you can check the value of $HTTP_REFERER for the ip of
> the trusted host, to further eliminate the potential.
How do you get the IP out of $HTTP_REFERER? As far as I know,
that only tells you the referring url, not the ip address. And couldn't
that value be messed with?
Chris