force refferer

RickyD77

hi all i just wonder if there's a way to force a referrer ???

exemple
i have a script whit a header location but with this my refferer is blank so i need a way to force a refferer or fake a click

tx Eric

superwormy

$_SERVER['HTTP_REFERER'] is a client-side set variable. If teh client doesnt wnat to send this, it doesn't need to, and theres no way to force him to send it. Note that it can also be spoofed, and sent as anything at all.

You're best bet might be to have a default page...


if ($_SERVER['HTTP_REFERER']) {

header ("Location: " . $_SERVER['HTTP_REFERER']);

} else {

header ("Location: [url]http://mydomain.com/defaultPage.php[/url]");

}

dartcol

Originally posted by superwormy
$SERVER['HTTP_REFERER'] is a client-side set variable.

Do you mean you can change this in your browser to prevent others from seeing
where you came from? If so, how? I'm using the code below to just test this variable but can't get anything no matter what browser I use.
Is there something I'm missing here?

print "You came from:
print $_SERVER['HTTP_REFERER'];
print "<br>";

dartcol

Okay, it's working now. However, I have a question. Why might http_referer not work? Apart
from simple things such as mispelling it and not using a it with $_SERVER[''] what other reasons
are there for it not producing anything. Any answers / links welcome. I searched for this for
about an hour but only came up with what I already now. What superwormy says above
is interesting but not qualified with the hows and whys.

superwormy

HTTP_REFERER is simply an HTTP header the browser sends, clients like wGet can send any HTTP headers they want, PHP's fsockopen() will allow you to do the same.

Some older browsers / browsers which don't behave simply neglect to send HTTP_REFERER headers.

If a person doesn't come from a page, ie they just type your domain name in or use a bookmark, HTTP_REFERER most likely won't be sent.