How do I do this? Im stumped.

Anon

I have a little security problem.

I am trying to run a php page only if the http refer contains a cetain domain name.
like "http://www.shoppingcart.com"

How could I do this? Any help for me would be greatly appreciated.

Arlene

sfullman

WARNING: You're depending on the browser to tell you the referrer. Also be aware that if they bookmark the page, or just type it into the address bar, there IS no referrer.

Here is the referer variable

if($GLOBALS['HTTP_REFERER']=='http://www.shoppingcart.com'){
#you're good to go
}else{

like I said, it's possible they DID come from there but the browser didn't pass the referer.

}

By the way, you should run this script to learn about GLOBALS:

foreach($GLOBALS as $n=>$v){
echo $n . ":" . $v . "<BR>";
}

There's a lot of stuff there to work with. have fun.

Sam Fullman
Compass Point Media

Anon

Thanks for your help. I see what you mean so this might not be my answer.

To be more specific, I am using paypal.com's purchase form code and they ask you for the URL of where you want to send customers after the purchase. the problem is, you can look at the source in the form and see the variable and just type it in, bypassing the purchase and ending up on the page to the site where people who purchased can download.

example:

I need to somehow hide this value, or check to make sure they come from paypal after purchase.