<snip>
The referrer is sent by the referring machine.  If that machine isn't 
setting it, you can't get it.  If memory serves, I think I remember 
someone claiming that this could also be blocked at a firewall...don't 
know if that's true or not though.
</snip>

Yup, certain firewalls either mangle the HTTP_REFERER such that it
appears it was sent by Elmer Fudd, showing up as HTTP_WEFERER, and
others just eliminate it altogether.

At any rate, if you're relying on HTTP_REFERER to make sure a script is
being called from a certain location, I don't think it's very reliable.

Does anyone have any ideas as to a workaround for this?

Cheers,
Pablo

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to