|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
> if (!$ENV{'HTTP_REFERER'}) {
The HTTP_REFERER header is not required, and some browsers
don't pass it to the server.
Dunno what else you could do. Maybe make all links to the
form as a submit button or image, and check whether the
REQUEST_METHOD is POST.
Why not allow direct access?
-Hao
--
http://spiderboystoybox.net/
**Majordomo list services provided by PANIX <URL:http://www.panix.com>**
**To Unsubscribe, send "unsubscribe phl" to majordomo@lists.pm.org**
|
|