Re: WEB LOG

On Monday 24 September 2001 16:04, Jeffrey Paul wrote: Well. If you check the HTTP_REFERER on the target-site it would work and give you at least some "security". However it is still not really secure. > At 07:08 AM 9/24/2001, Chris Herring wrote: > >OOPS, again, elseif isn't what needs to be done. > > > >Ok, here we go. > > > >if $pwd == $real_pwd { > >header ("Location: http://therealsite"); > >} else { > >header ("Location: http://badsite"); > >} > > For the record, that won't stop someone from going to the destination page > if the password doesn't match, which is what the person asked about. All > this will do is send them a redirect to an error page if the password > doesn't match, it doesn't prevent anyone at all from hitting, in your > example, http://therealsite. > > -j > > > -------------------------------------------------------- > Jeffrey Paul sneak@datavibe.net (877) 748 3467 > ICQ: 14295546 AIM: kw34hd1 NXTL/DC: 130*21*16749 > PGP: 0xF50BB9D7 A21AFD828C30EC77CCCC545DA0B3F501F50BB9D7