[NTLUG:Discuss] M$ strikes again

Greg Edwards greg at nas-inet.com
Fri Aug 29 12:26:39 CDT 2003


MadHat wrote:
> On Thu, 2003-08-28 at 21:46, Greg Edwards wrote:
> 
>>Not strictly a linux question, but it is an open standards (HTTP) and 
>>open source (Apache) question.
>>
>>I've come across a problem with an M$ browser that does not send the 
>>HTTP_REFERER field with any requests.  Every request has "-" in the 
>>referer field.  Like a fool I use this to validate access to some CGI 
>>programs for security reasons.  These are not redirects or foreign links.
>>
>>Is there a way to force the browser to send it or did Mr. Bill screw me 
>>again?  So far my I've only found 1 user in my logs that has this 
>>problem.  It's a recent MSIE update so I'm sure I'll be seeing more!!
> 
> 
> What version?  What's it claim to be.  I have not seen this.  Are you
> sure theya re not behind a proxy that might be stripping the data out?
> 

I just got confirmation from the user that this is IE 6.0.2800.1106IS on 
a Windows 98SE platform.  My Windows 98SE test platform is IE 
6.0.2800.1106IC.

I haven't found any other accesses in my logs where the referer is not 
sent when the source page (link from) was read off my site.  I don't 
expect the referer from a bookmarked page or foreign cached page.  I 
have 4 pages that I don't want accessed from bookmarks so I use the 
referer, well I use to use referer ;)

-- 
Greg Edwards
New Age Software, Inc. - http://www.nas-inet.com
======================================================
Galactic Outlaw        - http://goutlaw.nas-inet.com
   The ultimate cyberspace adventure!




More information about the Discuss mailing list