Pablo Gosse a écrit :
munging up the HTTP_REFERER for a page?

In HTTP, "Referer" is an OPTIONAL field in the HTTP/1.1 spec (see rfc 2616). I saw many strange referers (like 'Empty', 'bookmarks' 'XXX++', 'Removed by YYY', etc) sent or modified by security assistants, browsers, spiders... You can throw away many referers because of this (perhaps 20%)

Some user agent (ex browsers) are broken and send bad referers
(some mozilla, some browsers on Mac did this, from my memory).

Relying on the referer is not the best solution
- can be faked (using scripts, not std browser, well, ok)
- referer is not mandatory and not reliable
- pblm will only rise (privacy concerns is main reason,
  thousands of companies use systems 'cleaning' the referers)

Hope this helps

Christophe

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Reply via email to