http_referer doesnt work in IE...

[bledileka]

Hi people !

I tried to secure one page with http_referer. this is wot i did actualy :


<?php $kot = $_SERVER ["HTTP_REFERER"];
if ($kot == "page1.php")
{
echo "do some stuff";
} else {
echo "<a href=\"java script:window.close()\"><font color=\"#000000\">Close The Window !</font></a> ";
}
?>

Im not sure this is the right way but this is wot i thought can work.
Im havin problems with browsers. Its not workin with IE. With Mozilla works perfectly but in IE it just gives me Close the Window.
Can anybody help me on this ?

thnx.

 

[jpadie]

some browsers do not provide the HTTP referrer. i would not counsel reliance on it.

 

[feherke]

Hi

echo "<a href=\"java[highlight red] [/highlight]script:window.close()\"><font color=\"#000000\">Close The Window !</font></a> ";

There is no space, right ?

As jpadie wrote, do not rely on [tt]HTTP_REFERER[/tt]. Many people and security softwares are paranoid regarding that and just disable it.

I am not paranoid ( I think... ) and I use FireFox. But is just one click to change between sending and not sending [tt]Referer[/tt] HTTP header. Thanks to Chris Pederick's Web Developer extension.

Feherke.

http://rootshell.be/~feherke/