HTTP REFERER bug?

T

Travis Pupkin

Hi,

I built a site half a year ago with form that submits to page that
processes the info and then returns the user back to the page they came
from using HTTP_REFERER.

There's one guy -- using an identical set-up to our main testing
platform -- who kept getting the "URL required" error when doing this.
For some reason, on his system alone, HTTP_REFERER was not collecting
any referring URL.

Is it common for HTTP_REFERER to wuss out like this? What causes it?
 
B

Blair Bonnett

From what I gather though, it is from a form (either POST or GET) - so the
referrer should be there. The fact that others successfully use it also
suggest the problem is not on that page.

What is most likely to be happening is that he is running a firewall
(Norton AV is notorious for this) which is stripping out the referrer
information. Ask them to disable Privacy Control and see if that works.

By the way, can anybody come up with a good explaination why removing the
referrer increases your security?

Blair
 
S

Steven Burn

By the way, can anybody come up with a good explaination why removing the
referrer increases your security?

Absolutely nothing I can think of (except making it harder for us poor
webmasters to figure out who's coming from where, lol)

--
Regards

Steven Burn
Ur I.T. Mate Group
www.it-mate.co.uk

Keeping it FREE!

Disclaimer:
I know I'm probably wrong, I just like taking part ;o)
 
A

Aaron Bertrand [MVP]

By the way, can anybody come up with a good explaination why removing the
referrer increases your security?

Not security, but privacy. Imagine I come to your site directly from
playboy.com, and you log that referer information. During that session I
register for something on your site, and you associate that referer
information with my e-mail address.

Later, you sell my e-mail address, along with the information about what
sites I visit regularly, to porn spammers (or maybe Playboy directly).
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Members online

No members online now.

Forum statistics

Threads
473,744
Messages
2,569,479
Members
44,899
Latest member
RodneyMcAu

Latest Threads

Top