note 63773 added to language.variables.predefined
| From: | (at) | Date: | Thu, 30 Mar 2006 11:28:33 +0000 |
| Subject: | note 63773 added to language.variables.predefined | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-107021@lists.php.net to get a copy of this message | ||
WARNING!!!
THE MICROSOFT INTERNET EXPLORERS 5 and 6 COMPLICATE WORKING WITH $_SERVER["HTTP_REFERER"].
(BTW, is here anyone who believes in a simple life doing it with Microsoft Internet Explorers?)
In the case that your script has to check whether a requesting script is allowed
to request something or not you can do it by reading $_SERVER["HTTP_REFERER"] .
F.e. there is script "anna.php" requesting like so:
form ... method="post" action="peter.php"
input type="hidden" name="param" value="555"
/form
Or "anna.php" does the request like so:
.. href="peter.php?param=555" ...
Doing it with a normal browser it dosn't matter,
peter.php can "see" in $_SERVER["HTTP_REFERER"] that the referrer-domain
is correct and anna.php is the referrer.
THE MICROSOFT BROWSERS 5 AND 6 WANT SOMETHING SPECIAL:
Requesting by form ... will work,
requesting by href="..." WON'T!!
Attempting to read $_SERVER["HTTP_REFERER"] will result in
"... unknown index "HTTP_REFERER" ..."
- the variable will not even exist!
You can imagine the consequences, right?
----
Server IP: 212.124.37.9
Probable Submitter: 80.138.80.138
----
X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER
autolearn=no version=2.64
----
Manual Page -- http://www.php.net/manual/en/language.variables.predefined.php
Edit -- http://master.php.net/note/edit/63773
Del: integrated -- http://master.php.net/note/delete/63773/integrated
Del: useless -- http://master.php.net/note/delete/63773/useless
Del: bad code -- http://master.php.net/note/delete/63773/bad+code
Del: spam -- http://master.php.net/note/delete/63773/spam
Del: non-english -- http://master.php.net/note/delete/63773/non-english
Del: in docs -- http://master.php.net/note/delete/63773/in+docs
Del: other reasons-- http://master.php.net/note/delete/63773
Reject -- http://master.php.net/note/reject/63773
Search -- http://master.php.net/manage/user-notes.php