Re: [PHP] Referer checking is able to be referer spoofed

2005-03-26 Thread Marek Kilimajer
Dan Rossi wrote: On 20/03/2005, at 5:40 AM, Marek Kilimajer wrote: If you need only hotlink protection then the current referer checking is just enough. Most users will not install referer spoofing software. But if you need to be 100% sure the videos are streamed through affiliate server, you ca

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-25 Thread Dan Rossi
On 20/03/2005, at 5:40 AM, Marek Kilimajer wrote: If you need only hotlink protection then the current referer checking is just enough. Most users will not install referer spoofing software. But if you need to be 100% sure the videos are streamed through affiliate server, you can use tokens - a

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread dan rossi
On 20/03/2005, at 10:14 AM, Marek Kilimajer wrote: The image can be hotlinked too ;) Bit of a headfuck ey ? Hmm I think we are gonna go with a mixture of that and a token url. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread Marek Kilimajer
dan rossi wrote: Hmm its the exact setup with how the video filenames are generated in the player to prevent hotlinking. I guess I am on my own, my client has very paranoid customers as they have to pay for the bandwidth. Lets see how I go. But theoretically we must assume these people dont ha

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread Marek Kilimajer
Dotan Cohen wrote: On Sun, 20 Mar 2005 09:38:29 +1100, dan rossi <[EMAIL PROTECTED]> wrote: Hmm its the exact setup with how the video filenames are generated in the player to prevent hotlinking. I guess I am on my own, my client has very paranoid customers as they have to pay for the bandwidth. Le

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread Dotan Cohen
On Sun, 20 Mar 2005 09:38:29 +1100, dan rossi <[EMAIL PROTECTED]> wrote: > > > > Hmm its the exact setup with how the video filenames are generated in > > the player to prevent hotlinking. I guess I am on my own, my client > > has very paranoid customers as they have to pay for the bandwidth. > > L

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread dan rossi
Hmm its the exact setup with how the video filenames are generated in the player to prevent hotlinking. I guess I am on my own, my client has very paranoid customers as they have to pay for the bandwidth. Lets see how I go. But theoretically we must assume these people dont have php. It look

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread Dan Rossi
On 20/03/2005, at 5:40 AM, Marek Kilimajer wrote: If you need only hotlink protection then the current referer checking is just enough. Most users will not install referer spoofing software. But if you need to be 100% sure the videos are streamed through affiliate server, you can use tokens - a

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread Marek Kilimajer
Dan Rossi wrote: On 19/03/2005, at 2:36 AM, Marek Kilimajer wrote: Dan Rossi wrote: On 19/03/2005, at 2:06 AM, [EMAIL PROTECTED] wrote: I think you misunderstood me or I wasnt clear, the links are coming from a syndicate site to the main site, so we check on that domain. I am looking at other op

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-19 Thread Dan Rossi
On 19/03/2005, at 2:36 AM, Marek Kilimajer wrote: Dan Rossi wrote: On 19/03/2005, at 2:06 AM, [EMAIL PROTECTED] wrote: I think you misunderstood me or I wasnt clear, the links are coming from a syndicate site to the main site, so we check on that domain. I am looking at other options, maybe som

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-18 Thread Marek Kilimajer
Dan Rossi wrote: On 19/03/2005, at 2:06 AM, [EMAIL PROTECTED] wrote: the other side of this is blocking legit users. if you base your access (at least in part) on the referrer (aka referer), you will block anyone who has turned them off in their browser or who is behind a firewall that doesn't pass

Re: [PHP] Referer checking is able to be referer spoofed

2005-03-18 Thread Dan Rossi
On 19/03/2005, at 2:06 AM, [EMAIL PROTECTED] wrote: the other side of this is blocking legit users. if you base your access (at least in part) on the referrer (aka referer), you will block anyone who has turned them off in their browser or who is behind a firewall that doesn't pass them. both of th

[PHP] Referer checking is able to be referer spoofed

2005-03-18 Thread Dan Rossi
Hi there I am building a syndicate feed system for a client, it is based on referer checking and a id is passed over, I could do what I do with the expired url and generate a random string of some sort to login the user automatically, but then it relies on the third party to have php. I have te

[PHP] Referer checking is able to be referer spoofed

2005-03-18 Thread dan rossi
Hi there I am building a syndicate feed system for a client, it is based on referer checking and a id is passed over, I could do what I do with the expired url and generate a random string of some sort to login the user automatically, but then it relies on the third party to have php. I have te

[PHP] Referer parsing functions?

2005-02-18 Thread Brian Dunning
I've found a number of PHP classes for parsing server logs, but I just want to parse a single referer at a time. Anyone know of a class that will do this? 1) Extract just the site from the full referer string, 2) Extract the query keyword (if any) no matter what search engine the referer is fro

Re: [PHP] Referer problem

2004-05-31 Thread John W. Holmes
Merlin wrote: I am trying to prevent hotlinking of images by other servers. Pictures are generated on the fly by a php script, where I have included this code to prevent hot linking: $haystack = $_SERVER['HTTP_REFERER']; $needle = 'globosapiens'; $pos = strpos($haystack, $needle); if ($pos

Re: [PHP] Referer problem

2004-05-31 Thread Marek Kilimajer
Merlin wrote: Hi there, I am trying to prevent hotlinking of images by other servers. Pictures are generated on the fly by a php script, where I have included this code to prevent hot linking: $haystack = $_SERVER['HTTP_REFERER']; $needle = 'globosapiens'; $pos = strpos($haystack, $needle);

[PHP] Referer problem

2004-05-31 Thread Merlin
Hi there, I am trying to prevent hotlinking of images by other servers. Pictures are generated on the fly by a php script, where I have included this code to prevent hot linking: $haystack = $_SERVER['HTTP_REFERER']; $needle = 'globosapiens'; $pos = strpos($haystack, $needle); if ($pos ===

Re: [PHP] referer on javascript location.href

2003-09-10 Thread daniel
please excuse me, there is tonnes on google :\ > hi there, i have a delete button which uses a javascript location.href > to switch to a delete action in the same script as the form action > handles something different, if i switch to that page the referer gets > lost in the mix so i cant tell how

[PHP] referer on javascript location.href

2003-09-10 Thread daniel
hi there, i have a delete button which uses a javascript location.href to switch to a delete action in the same script as the form action handles something different, if i switch to that page the referer gets lost in the mix so i cant tell how to redirect back to that page on error. if someone has

Re: [PHP] referer counter (scope part)

2003-06-12 Thread Chris Hayes
At 11:29 12-6-03, you wrote: function ref($url) { $this->incr($pc,$fp,$nc); $this->write($nc,$cfile); } function incr($pc,$fp,&$nc) { if($pc != "")

[PHP] referer counter

2003-06-12 Thread Thomas Hochstetter
Hi guys, I am writing a counter that checks where the hit comes from, and if it comes from the same site, it will not count . I have a question related to performance: In the script (as yet) I have to open the txt file twice at this stage, because I first need to read from it and then write to it

Re: [PHP] referer

2003-03-28 Thread Mat Harris
On Fri, Mar 28, 2003 at 04:19:25 -0500, Sebastian wrote: > try: $_SERVER['HTTP_REFERER']; > > cheers, > - Sebastian > > From: "Mat Harris" <[EMAIL PROTECTED]> > > | am i going mad or something? > | i want to use the referer string from the server vars, but the > | $_SERVER["REFERER"] and $HTTP_S

Re: [PHP] referer

2003-03-28 Thread Sebastian
try: $_SERVER['HTTP_REFERER']; cheers, - Sebastian - Original Message - From: "Mat Harris" <[EMAIL PROTECTED]> | am i going mad or something? | i want to use the referer string from the server vars, but the | $_SERVER["REFERER"] and $HTTP_SERVER_VARS["REFERER"] vars are empty | and the

[PHP] referer

2003-03-28 Thread Mat Harris
am i going mad or something? i want to use the referer string from the server vars, but the $_SERVER["REFERER"] and $HTTP_SERVER_VARS["REFERER"] vars are empty and the phpinfo doesn't show the referer at all. what's going on? cheers -- Mat Harris OpenGPG Public Key ID: C37

Re: [PHP] referer keywords

2003-01-22 Thread Jason Wong
On Wednesday 22 January 2003 15:41, Dhaval Desai wrote: > Hello ppl, > > I want to find out what keywords are people exactly using to get to my > website and from where are they coming(Which search engine?)...I want to > make a custom script, I don't want to use my web server logs or anything... >

[PHP] referer keywords

2003-01-21 Thread Dhaval Desai
Hello ppl, I want to find out what keywords are people exactly using to get to my website and from where are they coming(Which search engine?)...I want to make a custom script, I don't want to use my web server logs or anything... Is it possible..?? - Dhaval ___

Re: [PHP] Referer Is Empty

2002-03-07 Thread Bogdan Stancescu
Javascript, if that's acceptable for the environment you're working in... Bogdan Steven Walker wrote: > Hello, > > I'm having trouble getting the referring url. I have tried: > $HTTP_REFERER > getenv(HTTP_REFERER); > $_SERVER[HTTP_REFERER]; > ... but they are all blank. > > The refe

[PHP] Referer Is Empty

2002-03-07 Thread Steven Walker
Hello, I'm having trouble getting the referring url. I have tried: $HTTP_REFERER getenv(HTTP_REFERER); $_SERVER[HTTP_REFERER]; ... but they are all blank. The referring page has a meta http-equiv=Refresh header. If the user waits for the page to automatically redirect, t

[PHP] Referer Question

2001-12-05 Thread George E. Papadakis
Hi, Say I have an image called in a page which is actually a PHP script (A banner image for example). Is there any variable I could use to detect where the the one that entered the page and ran the php script came from? I guess it's something like the referer of HTTP_referer or something. I coul

Re: [PHP] referer from email client

2001-05-17 Thread Eris Ristemena
the case was i do not have such control to put any variable on the URL. :( ers --- [EMAIL PROTECTED] wrote: > simpler to just put a variable on the link > > http://foo.bar?refer=email or whatever...  > > [EMAIL PROTECTED] wrote: > > hellos, > > > > how can we know the referer link is from an

RE: [PHP] referer from email client

2001-05-15 Thread Maxim Maletsky
Sent: Wednesday, May 16, 2001 12:13 PM To: [EMAIL PROTECTED] Subject: [PHP] referer from email client hellos, how can we know the referer link is from an email client like outlook ? i have tried this, and the $HTTP_REFERRER is empty. thanks ers __ D

[PHP] referer from email client

2001-05-15 Thread Eris Ristemena
hellos, how can we know the referer link is from an email client like outlook ? i have tried this, and the $HTTP_REFERRER is empty. thanks ers __ Do You Yahoo!? Yahoo! Auctions - buy the things you want at great prices http://auctions.yahoo.com/