note 58077 deleted from ref.session by danbrown
| From: | danbrown@php.net | Date: | Sun, 20 Jul 2008 18:27:50 +0000 |
| Subject: | note 58077 deleted from ref.session by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-142229@lists.php.net to get a copy of this message | ||
Note Submitter: lassial at hotmail dot com
----
If you would like to ensure your sessions with referer checking you must use iniset() regularly, as
"session.referer_check contains the substring you want to check each HTTP Referer for"
so there is no way PHP can automatically know which URL you are expecting, e.g. it does not assume
SCRIPT_NAME or anything else.
I had a serious problem when I tried to disable referer checking with session.referer_check = 0
which of course does not work