note 63773 deleted from language.variables.predefined by bjori

From: Date: Thu, 30 Mar 2006 11:58:11 +0000
Subject: note 63773 deleted from language.variables.predefined by bjori
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-107023@lists.php.net to get a copy of this message
Note Submitter: reinhard-baum (at) custodinos.com Reason: useless ---- WARNING!!! THE MICROSOFT INTERNET EXPLORERS 5 and 6 COMPLICATE WORKING WITH $_SERVER["HTTP_REFERER"]. (BTW, is here anyone who believes in a simple life doing it with Microsoft Internet Explorers?) In the case that your script has to check whether a requesting script is allowed to request something or not you can do it by reading $_SERVER["HTTP_REFERER"] . F.e. there is script "anna.php" requesting like so: form ... method="post" action="peter.php" input type="hidden" name="param" value="555" /form Or "anna.php" does the request like so: .. href="peter.php?param=555" ... Doing it with a normal browser it dosn't matter, peter.php can "see" in $_SERVER["HTTP_REFERER"] that the referrer-domain is correct and anna.php is the referrer. THE MICROSOFT BROWSERS 5 AND 6 WANT SOMETHING SPECIAL: Requesting by form ... will work, requesting by href="..." WON'T!! Attempting to read $_SERVER["HTTP_REFERER"] will result in "... unknown index "HTTP_REFERER" ..." - the variable will not even exist! You can imagine the consequences, right?

« previous php.notes (#107023) next »