PDA

View Full Version : Using referrer to allow access to Perl CGI


Matt
01-18-2001, 02:59 AM
Hello everyone,
I am attempting to use BigNoseBird's form processing Perl CGI script. If anyone knows of any major security issues with this script please let me know. Also, I am using the HTTP_REFERRER variable to ensure that the script is not run from other web sites. Will this method break the script for those running privacy programs or is this referrer stored on the server (and thus not dependent on receiving referrer from client).

Thanks in advance for the help
-Matt<!-- NO_AUTO_LINK -->
[This message has been edited by Matt (edited 01-18-01@3:27 pm)]

Charles Capps
01-18-2001, 07:57 PM
Referrers are sent by the browser.... it would probably be blocked in many privacy packages.[nbsp][nbsp]

Referrers are also somewhat easy to fake.[nbsp][nbsp]It's best not to be completely reliant on them....