Re: [C#] check I come from ...

True -- good point.

And now that I think about it, I once had a version of Noron Internet
Security which would (by default) strip out the HTTP_REFERER variable
from outgoing HTTP traffic as a way to protect you from being "tracked"
while on the internet.  Obviously, there are some sites that require
this and it was configurable, but its something to consider...

---
Patrick Steele
http://weblogs.asp.net/psteele


-----Original Message-----
From: Discussion of building .NET applications targeted for the Web
[mailto:[email protected]] On Behalf Of Efran Cobisi
Sent: Thursday, May 10, 2007 7:38 AM
To: [email protected]
Subject: Re: [DOTNET-WEB] [C#] check I come from ...


Pay attention to the fact that the Referer HTTP header, which
HTTP_REFERER gets its value from, is very easily spoofable. So, remember
you won't have any guarantees about the thruth of that value.

HTH

--
Efran Cobisi
http://www.cobisi.com

Patrick Steele wrote:
> Look at the HTTP_REFERRER server variable.
>
> ---
> Patrick Steele
> http://weblogs.asp.net/psteele

===================================
This list is hosted by DevelopMentor®  http://www.develop.com

View archives and manage your subscription(s) at http://discuss.develop.com