HTTP REFERER bug?

Discussion in 'ASP General' started by Travis Pupkin, Jan 24, 2004.

  1. Hi,

    I built a site half a year ago with form that submits to page that
    processes the info and then returns the user back to the page they came
    from using HTTP_REFERER.

    There's one guy -- using an identical set-up to our main testing
    platform -- who kept getting the "URL required" error when doing this.
    For some reason, on his system alone, HTTP_REFERER was not collecting
    any referring URL.

    Is it common for HTTP_REFERER to wuss out like this? What causes it?
     
    Travis Pupkin, Jan 24, 2004
    #1
    1. Advertising

  2. Plenty of things.
    http://www.aspfaq.com/2169

    --
    Aaron Bertrand
    SQL Server MVP
    http://www.aspfaq.com/




    "Travis Pupkin" <> wrote in message
    news:...
    > Hi,
    >
    > I built a site half a year ago with form that submits to page that
    > processes the info and then returns the user back to the page they came
    > from using HTTP_REFERER.
    >
    > There's one guy -- using an identical set-up to our main testing
    > platform -- who kept getting the "URL required" error when doing this.
    > For some reason, on his system alone, HTTP_REFERER was not collecting
    > any referring URL.
    >
    > Is it common for HTTP_REFERER to wuss out like this? What causes it?
     
    Aaron Bertrand [MVP], Jan 24, 2004
    #2
    1. Advertising

  3. From what I gather though, it is from a form (either POST or GET) - so the
    referrer should be there. The fact that others successfully use it also
    suggest the problem is not on that page.

    What is most likely to be happening is that he is running a firewall
    (Norton AV is notorious for this) which is stripping out the referrer
    information. Ask them to disable Privacy Control and see if that works.

    By the way, can anybody come up with a good explaination why removing the
    referrer increases your security?

    Blair


    Aaron Bertrand [MVP] <> wrote in article
    <#>...
    > Plenty of things.
    > http://www.aspfaq.com/2169
    >
    > "Travis Pupkin" <> wrote in message
    > news:...
    > > Hi,
    > >
    > > I built a site half a year ago with form that submits to page that
    > > processes the info and then returns the user back to the page they came
    > > from using HTTP_REFERER.
    > >
    > > There's one guy -- using an identical set-up to our main testing
    > > platform -- who kept getting the "URL required" error when doing this.
    > > For some reason, on his system alone, HTTP_REFERER was not collecting
    > > any referring URL.
    > >
    > > Is it common for HTTP_REFERER to wuss out like this? What causes it?
     
    Blair Bonnett, Jan 25, 2004
    #3
  4. Travis Pupkin

    Steven Burn Guest

    > By the way, can anybody come up with a good explaination why removing the
    > referrer increases your security?


    Absolutely nothing I can think of (except making it harder for us poor
    webmasters to figure out who's coming from where, lol)

    --
    Regards

    Steven Burn
    Ur I.T. Mate Group
    www.it-mate.co.uk

    Keeping it FREE!

    Disclaimer:
    I know I'm probably wrong, I just like taking part ;o)


    Blair Bonnett <> wrote in message
    news:01c3e30c$1781c880$2e9460cb@default...
    > From what I gather though, it is from a form (either POST or GET) - so the
    > referrer should be there. The fact that others successfully use it also
    > suggest the problem is not on that page.
    >
    > What is most likely to be happening is that he is running a firewall
    > (Norton AV is notorious for this) which is stripping out the referrer
    > information. Ask them to disable Privacy Control and see if that works.
    >
    > By the way, can anybody come up with a good explaination why removing the
    > referrer increases your security?
    >
    > Blair
    >
    >
    > Aaron Bertrand [MVP] <> wrote in article
    > <#>...
    > > Plenty of things.
    > > http://www.aspfaq.com/2169
    > >
    > > "Travis Pupkin" <> wrote in message
    > > news:...
    > > > Hi,
    > > >
    > > > I built a site half a year ago with form that submits to page that
    > > > processes the info and then returns the user back to the page they

    came
    > > > from using HTTP_REFERER.
    > > >
    > > > There's one guy -- using an identical set-up to our main testing
    > > > platform -- who kept getting the "URL required" error when doing this.
    > > > For some reason, on his system alone, HTTP_REFERER was not collecting
    > > > any referring URL.
    > > >
    > > > Is it common for HTTP_REFERER to wuss out like this? What causes it?
     
    Steven Burn, Jan 25, 2004
    #4
  5. > By the way, can anybody come up with a good explaination why removing the
    > referrer increases your security?


    Not security, but privacy. Imagine I come to your site directly from
    playboy.com, and you log that referer information. During that session I
    register for something on your site, and you associate that referer
    information with my e-mail address.

    Later, you sell my e-mail address, along with the information about what
    sites I visit regularly, to porn spammers (or maybe Playboy directly).
     
    Aaron Bertrand [MVP], Jan 25, 2004
    #5
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. dave wanta

    Re: How to Spoof Referer URL

    dave wanta, Jul 6, 2003, in forum: ASP .Net
    Replies:
    1
    Views:
    1,054
    Admin
    Jul 7, 2003
  2. =?Utf-8?B?TWlsYW4gTmVnb3Zhbg==?=

    How do I clear the "Referer" header?

    =?Utf-8?B?TWlsYW4gTmVnb3Zhbg==?=, Aug 18, 2004, in forum: ASP .Net
    Replies:
    4
    Views:
    785
    clintonG
    Aug 19, 2004
  3. Kevin Spencer

    No referer page for SWF files

    Kevin Spencer, Oct 27, 2004, in forum: ASP .Net
    Replies:
    1
    Views:
    566
    Raed Sawalha
    Oct 28, 2004
  4. Stuart
    Replies:
    0
    Views:
    364
    Stuart
    Feb 26, 2004
  5. exxos

    http referer

    exxos, Mar 3, 2005, in forum: Javascript
    Replies:
    3
    Views:
    128
    Evertjan.
    Mar 3, 2005
Loading...

Share This Page