John Nichel wrote:
> [EMAIL PROTECTED] wrote:
>> Sadly, I get nothing...
>> the other server I'm talking to is owned by our company, it's a
>> Lotus Domino server... so in theory, they'll be able to enable this
>> variable to be passed? 
> 
> I can never remember one day to the other which it is, but I _think_
> it's the browser which sets/sends the REFERER, not the referring
> server. 
> 
> --
> John C. Nichel
> KegWorks.com
> 716.856.9675
> [EMAIL PROTECTED]

You should avoid using HTTP_REFERER if at all possible.  I found out the
hard way that some firewalls will change HTTP_REFERER to HTTP_WEFERER,
obfuscate it some other way, or just not set it.  This can also be done
by the browser in some cases.

The following is quoted from a previous post by Chris Shifflet:

"Referer is just as easy to spoof as the form data you're expecting."

HTH.

Pablo

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to