note 41947 added to ref.mail
| From: | php-general at lists dot php dot net | Date: | Tue, 27 Apr 2004 11:35:58 +0000 |
| Subject: | note 41947 added to ref.mail | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-68866@lists.php.net to get a copy of this message | ||
The HTTP-Header named "Referer" is send by the browser i.e. the client. Therefore it can
be forged very easily an the check for the correct Referer won't help much.
Do not send sensitive information to the client and expect it to be send back. Instead store it in
the session.
----
Manual Page -- http://www.php.net/manual/en/ref.mail.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+41947
Delete -- http://master.php.net/manage/user-notes.php?action=delete+41947&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+41947&report=yes
Search -- http://master.php.net/manage/user-notes.php