Posted by J.O. Aho on 10/06/07 13:54

H@C0 wrote:
> Hi.
> I have a php webside with a guestbook and I want access to the guestbook
> only via the homepage.
> How can I modify the index.php of the guestbook to prevent access from
> outside the website?
> Any hints ?

Check the $_SERVER['HTTP_REFERER'] that it has a value that is a page on
your site, but keep in mind that this can be spoofed (spammers has no
problem at all to post automatically in your guestbook) and legitimate
users may not be able to post as their firewall filters ref-addresses
without them knowing about it.


--

//Aho

[Back to original message]