Can HTTP_REFERRER be used to prevent external links?

John Fitzgibbon jfitzgibbon at Galwaylibrary.ie
Mon Nov 4 05:25:18 EST 2002


Hi,

We plan to use HTTP_REFERRER to prevent external links. My question is can a web server be easily spoofed. Is it possible to send a http request header containing the required HTTP_REFERRER as text without clicking on a link?

Thanks in advance.

Regards
John



More information about the Web4lib mailing list