note 63773 deleted from language.variables.predefined by bjori
| From: | bjori@php.net | Date: | Thu, 30 Mar 2006 11:58:11 +0000 |
| Subject: | note 63773 deleted from language.variables.predefined by bjori | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-107023@lists.php.net to get a copy of this message | ||
Note Submitter: reinhard-baum (at) custodinos.com
Reason: useless
----
WARNING!!!
THE MICROSOFT INTERNET EXPLORERS 5 and 6 COMPLICATE WORKING WITH $_SERVER["HTTP_REFERER"].
(BTW, is here anyone who believes in a simple life doing it with Microsoft Internet Explorers?)
In the case that your script has to check whether a requesting script is allowed
to request something or not you can do it by reading $_SERVER["HTTP_REFERER"] .
F.e. there is script "anna.php" requesting like so:
form ... method="post" action="peter.php"
input type="hidden" name="param" value="555"
/form
Or "anna.php" does the request like so:
.. href="peter.php?param=555" ...
Doing it with a normal browser it dosn't matter,
peter.php can "see" in $_SERVER["HTTP_REFERER"] that the referrer-domain
is correct and anna.php is the referrer.
THE MICROSOFT BROWSERS 5 AND 6 WANT SOMETHING SPECIAL:
Requesting by form ... will work,
requesting by href="..." WON'T!!
Attempting to read $_SERVER["HTTP_REFERER"] will result in
"... unknown index "HTTP_REFERER" ..."
- the variable will not even exist!
You can imagine the consequences, right?