form security

I have got this code from someone:

$my_host = $SERVER["SERVER_ADDR"];
$referer = $SERVER["REMOTE_ADDR"];

if ($my_host == $referer){
do this
} else {
do this
}

I only want to allow form data from within my site but when testing, the two vars are never equal DESPITE where I come from.

ANY help would be much appreciated 🙂

echo the two out and see what each gives you, then you may be able to work out why they are not equal.

You may just have to use substr on one/both of them to make sure they are always the same.

Note that REMOTE_ADDR only gives your site address if you use a link, if someone (even on your site) types in a URL REMOTE_ADDR returns nothing.