Hi, probably a stupid question, but I'm too lazy to look through the source; and I'm sure many of you here can answere this question at once: are the server-side vars generated by the server or only echoed vars which where provided by the browser?? specially REQUEST_URI is of interest for me for security purposes in scripts, so is it generated from Apache self or can it be faked by the client?
Guenter.
