RE: [PHP] What to use when HTTP_REFERER is not set?

You could pass a variable in the url ie: http://wwww.mysite.net/mypage.php?referer=goodsite and check if the variable is set. Easily fooled but if you just want elementary security it will do. If you have access to the first website you could make the variable dependant on the date or some other simple method so that the variable isn't static and check if there is a match. ie: $referer=$date * 5; If you don't have access then maybe the first website could pull the link to your page from your site on the fly - even safer. ____________________________ Matthew Luchak Webmaster Kaydara Inc. mluchak@kaydara.com -----Original Message----- From: Pierre-Yves Lemaire [mailto:pylem@sympatico.ca] Sent: Saturday, November 03, 2001 3:59 PM To: php-general@lists.php.net Subject: [PHP] What to use when HTTP_REFERER is not set? Hello, I need to put a small security feature in one of my page. The page is open as a popup from another web site. By checking the referer I tought I could block any other call to this page but the referer variable is often not set... What else could I do? ( no ssl so far is available for this :( ) Any advice, tutorial or doc on the subject would be helpful. thanks, py