getenv("HTTP_REFERER") and SSL/https

[sroyers]

I run an SSL site that uses a php mail script on another server. This mail script uses getenv("HTTP_REFERER") to see whether the mail request is allowed. However, the referer is httpS, so the getenv("HTTP_REFERER") command returns an empty string. Can anyone help me with this?

Is there a php command to retrieve the referer from an SSL site?

[dalecosp]

What does

$_SERVER['REMOTE_ADDR']

give you?

[sroyers]

Originally posted by dalecosp
What does

$_SERVER['REMOTE_ADDR']

give you? [/B]

... that returns the IP address of the machine where the script user's browser is on, not the address from the requesting server....

[dalecosp]

Yeah, I suppose that'd be right. Answered a bit quickly.

A quick purview of predefined vars at the manual doesn't help much either.

I'm sure that there's an relatively easy way, but can't think what it might be...sorry 🙁

[sroyers]

Originally posted by dalecosp
Yeah, I suppose that'd be right. Answered a bit quickly.

A quick purview of predefined vars at the manual doesn't help much either.

I'm sure that there's an relatively easy way, but can't think what it might be...sorry 🙁

Thanks anyway... I don't think it's that easy though. Since SSL is a tunnel, the receiving server probably just does not have access to the HTTP headers...

[John_Canyon]

I assume you are passing variables to your mail script on the other server, why not authenticate the encrypted message with a username and password?

I do this with several of my servers and it works fine.

Cheers,

John