Jon Anderson wrote:
Greg Donald wrote:
There will be legitimate requests that will fail since not all
browsers send a referer.
How many browsers out there that support the Java plug-in will not
support referrers?
Besides, the simple solution to that problem is just check for a
non-existant referrer. If the browser doesn't support it, then it works
anyway.
It's not a question of support, it's a question of something stripping
it out before the request hits your server. This could be the browser,
or a proxy, or pretty much anything else the request goes through.
The "solution", as you rightly point out, is to simply allow it if there
is no referrer.
-Stut
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php