Jon Anderson wrote:
Greg Donald wrote:
There will be legitimate requests that will fail since not all
browsers send a referer.

How many browsers out there that support the Java plug-in will not support referrers?

Besides, the simple solution to that problem is just check for a non-existant referrer. If the browser doesn't support it, then it works anyway.

It's not a question of support, it's a question of something stripping it out before the request hits your server. This could be the browser, or a proxy, or pretty much anything else the request goes through.

The "solution", as you rightly point out, is to simply allow it if there is no referrer.

-Stut

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to