Robert Cummings wrote: > So at least the spec explicitly recommends allowing the user to set > whether the referrer is sent. As such, no site should rely on it.
Agreed, in principle it should not be relied upon. But then neither should MSIE[567] :-) Besides, today Firefox and Opera both allow the user to set whether the referrer is sent. Until the default is changed to not to send it, I'll stick to using REFERER. If/when the time comes, it's an easy change, and until then it's no headache. Anyway, thanks for some interesting points, Rob - I like an intelligent response. Quoting the HTTP spec to me was good - I'll have to be a little wary of you in the future :-) /Per Jessen, Zürich -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
