note 41947 deleted from ref.mail by nlopess
| From: | nlopess@php.net | Date: | Tue, 27 Apr 2004 13:14:41 +0000 |
| Subject: | note 41947 deleted from ref.mail by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-68871@lists.php.net to get a copy of this message | ||
Note Submitter:
----
The HTTP-Header named "Referer" is send by the browser i.e. the client. Therefore it can
be forged very easily an the check for the correct Referer won't help much.
Do not send sensitive information to the client and expect it to be send back. Instead store it in
the session.