http_referer

[Louie Miranda]

Does php support this? HTTP_REFERER
or simply cgi and ssi only?

-
Louie

[Catalin Trifu]

Hi,

It does support any HTTP information, and since
HTTP_REFERER is part of the HTTP spec. it is supported.
You can find it in the $_SERVER variable.
FYI: The referer is not a reliable information.

Cheers,
Catalin


"Louie Miranda" <louie@axishift.ath.cx> wrote in message
news:019901c378f6$6ef6c5a0$020119ac@admwebdevws...

> Does php support this? HTTP_REFERER
> or simply cgi and ssi only?
>
> -
> Louie

[Motherofperls@aol.com]

Hi all,

Is there a way to get the path of the script that called the current script
from the interpeter instead of from the HTTP_REFERER variable?

Thanks
Tricia

[Randal L. Schwartz]

>>>>> "Motherofperls" == Motherofperls <Motherofperls@aol.com> writes:

Motherofperls> Is there a way to get the path of the script that called the current script
Motherofperls> from the interpeter instead of from the HTTP_REFERER variable?

If this is a CGI question, it's best asked in the CGI mailing list.

--
Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095
<merlyn@stonehenge.com> <URL:http://www.stonehenge.com/merlyn/>
Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training!

[Scrappy]

I have a form that submits to a 2nd page with a SQL insert query. The
database has a Primary Key that is an identity field (autonumber).

If I submit the form it inserts the record, if I refresh the insert page
then it inserts another record. Also if I open the insert page up directly,
it will insert a record. I would like to use the http_referer and an IF
statement to only allow the query to run if data has been submitted from the
form page (wo_main.asp). Can anyone help me with this? Thanks!

Darren
MCP

[Jeff Cochran]

On Tue, 24 Feb 2004 19:59:23 GMT, "Scrappy"
<celtics@lan-specialist.com> wrote:

>I have a form that submits to a 2nd page with a SQL insert query. The
>database has a Primary Key that is an identity field (autonumber).
>
>If I submit the form it inserts the record, if I refresh the insert page
>then it inserts another record. Also if I open the insert page up directly,
>it will insert a record. I would like to use the http_referer and an IF
>statement to only allow the query to run if data has been submitted from the
>form page (wo_main.asp). Can anyone help me with this? Thanks!

Basic syntax would be something like:

Referer = Request.ServerVariables("HTTP_REFERER")

Then compare that to what you want. Though I'm guessing you're using
a Request.Querystring and perhaps want a Request.Form using a POST
instead. You can also use session variables, cookies or a number of
methods to handle this. Post back to the form page or use a
Javascript to check form submission, etc.

Jeff

[McKirahan]

"Jeff Cochran" <jcochran.nospam@naplesgov.com> wrote in message
news:403bbe55.1125368814@msnews.microsoft.com...

> On Tue, 24 Feb 2004 19:59:23 GMT, "Scrappy"
> <celtics@lan-specialist.com> wrote:
>

> >I have a form that submits to a 2nd page with a SQL insert query. The
> >database has a Primary Key that is an identity field (autonumber).
> >
> >If I submit the form it inserts the record, if I refresh the insert page
> >then it inserts another record. Also if I open the insert page up

directly,

> >it will insert a record. I would like to use the http_referer and an IF
> >statement to only allow the query to run if data has been submitted from

the

> >form page (wo_main.asp). Can anyone help me with this? Thanks!

>
> Basic syntax would be something like:
>
> Referer = Request.ServerVariables("HTTP_REFERER")
>
> Then compare that to what you want. Though I'm guessing you're using
> a Request.Querystring and perhaps want a Request.Form using a POST
> instead. You can also use session variables, cookies or a number of
> methods to handle this. Post back to the form page or use a
> Javascript to check form submission, etc.
>
> Jeff

A note on the use of HTTP_REFERER -- Norton Personal Firewall (and others)
by default prevent the passing of its value.