Sebastian wrote:
ok, so i made a file manager and i need to prevent people from linking
directly to files that do not come from another part of the site.
i know i can use http_referer, but i wonder how fool proof it is, i dont
want to spit out errors to a legit user that actually came from a valid
- Original Message -
From: "Sebastian" <[EMAIL PROTECTED]>
To:
Sent: Saturday, February 26, 2005 8:31 PM
Subject: [PHP] http referer
> ok, so i made a file manager and i need to prevent people from linking
> directly to files that do not come from another part of
ok, so i made a file manager and i need to prevent people from linking
directly to files that do not come from another part of the site.
i know i can use http_referer, but i wonder how fool proof it is, i dont
want to spit out errors to a legit user that actually came from a valid page
before tryi
algary, Alberta, Canada
T2P 4L4
(403) 781-4948
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, December 13, 2001 7:58 AM
To: [EMAIL PROTECTED]
Subject: [PHP] http referer problems
For some reason, the following if statement isn't working.
> if ($efa != "nm" || $HTTP_REFERER !=
> "http://www.globalhealth.org/news/article.php3?id=1526";){
> do this);
> }
Not sure what the exact problem is as you haven't been all that
descriptive as to what the values are or what is happening, but
you should know that $HTTP_REFERER can't be trusted.
For some reason, the following if statement isn't working. Maybe I haven't
had enough coffee to drink or maybe I've had too much - what am I missing?
if ($efa != "nm" || $HTTP_REFERER !=
"http://www.globalhealth.org/news/article.php3?id=1526";){
do this);
}
Thank you, Shawna
--
PHP General M
Dear folks
I was told that http referer can tell me where the user come from. But it does not
work all the time, is there anything else that work better than this?
Jack
[EMAIL PROTECTED]
"Love your enemies, it will drive them nuts"
Hi,
I've got a problem with the HTTP_REFERER. I'll explain it to you now.
I've got a site where I can't logon to to change some things. That site
checks the HTTP_REFERER variable and if it matches with what's in the MySQL
db it passes you through.
Now I've got a site which has to have access to
8 matches
Mail list logo
