How to know referrer on a form POST submission?

mholt · 10-29-2005, 12:15 PM

Hi! ^_^

Suppose somebody submits a form via POST - how do I check the referrer so that I know the form actually came from MY SITE ONLY and not a remote server (this is used to prevent hacking, it's a good security measure)

Thanks,
-Matt

sdsinc · 10-29-2005, 01:01 PM

getenv('HTTP_REFERER') ?

But the referer can be faked so don't rely on it alone and always check form submissions etc

mholt · 10-29-2005, 01:33 PM

yeah of course... thanks! ^_^

10-29-2005, 12:15 PM	#1 (permalink)
mholt DNOA Member Join Date: May 2004 Location: Utah Posts: 5,041 18.01 NP$ (Donate)	How to know referrer on a form POST submission? Hi! ^_^ Suppose somebody submits a form via POST - how do I check the referrer so that I know the form actually came from MY SITE ONLY and not a remote server (this is used to prevent hacking, it's a good security measure) Thanks, -Matt __________________ codeboards A high-quality community of programmers -- Join today and post! We want new members!

10-29-2005, 01:01 PM	#2 (permalink)
sdsinc Domains my Dominion Join Date: Aug 2005 Location: Web 1.0 Posts: 6,284 1,095.94 NP$ (Donate)	getenv('HTTP_REFERER') ? But the referer can be faked so don't rely on it alone and always check form submissions etc __________________ Buy now - MassDeveloper.com $500

10-29-2005, 01:33 PM	#3 (permalink)
mholt DNOA Member Join Date: May 2004 Location: Utah Posts: 5,041 18.01 NP$ (Donate)	yeah of course... thanks! ^_^ __________________ codeboards A high-quality community of programmers -- Join today and post! We want new members!

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)