Spoof REFERER Variable ? 1

[nomaam22]

Is it possible to spoof the REFERER variable when forwarding to an outside page?

For example:

The page is directed through a header

$URL="

http://www.tek-tips.com";

header ("Refresh: 0; url=$URL");

Now is it possible to set the REFERER value?

I have located this documentation which suggest it would be possible.

http://www.mustap.com/phpzone_post_62_how-to-bypass-the-referer-se

However I am unsure on how to implement it in my example.

Any help would be appreciated.

Thanks.

 

[feherke]

Hi

Now is it possible to set the REFERER value?

The Referer is a HTTP request header, so it is set by the user agent ( the HTTP client, the software making the request ). You can set the Referer in PHP only for the requests made by PHP.

In the situation described in the mentioned example, PHP makes the request. So setting the Referer from PHP is possible.

In the situation described by you, PHP instructs the user agent to make a request, then the user agent makes the request. So setting the Referer from PHP is not possible.


Feherke.

http://free.rootshell.be/~feherke/