Posted by Alvaro G. Vicario on 11/14/20 11:53

*** walterbyrd escribió/wrote (20 Jul 2006 11:49:52 -0700):
> #if either form field is empty return to the log-in page
> if ( (!$username) or (!$password) )
> {
> header("Location:$HTTP_REFERER");
> exit();
> }

Do you check that $HTTP_REFERER actually has a value? Even if you have
register_globals set to on, you must be aware that browsers can send
HTTP_REFERER... or not.

If the variable is empty, it's not a good idea to send an empty location
header.

--
-+ http://alvaro.es - Álvaro G. Vicario - Burgos, Spain
++ Mi sitio sobre programación web: http://bits.demogracia.com
+- Mi web de humor con rayos UVA: http://www.demogracia.com
--

• Next in forum: Re: acquiring value of primary key from uploaded file
• Prev in forum: Re: setup.php
• Thread view: Re: $HTTP_REFERER crashes my system like clockwork

[Reply to this message]