[crazytrain]

I am trying to block access to my site from a particular site. The following code works fine but how do I get it to work with more than one link from the site I am blocking.

PHP Code:

// get referrer from _SERVER array

$ref = $_SERVER["HTTP_REFERER"];



// look for bad guys!

if ($ref == 'http://site_to_block.com/top10.aspx') 

{ 

    //bad referrer detected, exit script

    print "Access Denied"; 

    exit;

} 

this link is blocked --> http://site_to_block.com/top10.aspx

but if I add ($ref== 'http://site_to_block.com/top10.aspx', 'http://site_to_block.com/link_from_another_page.aspx')

the script doesn't work. Where am I going wrong?

[Nico]

Try this to block the whole domain instead of each file.

PHP Code:

$site_to_block = 'site_to_block.com'; // without www.

$ref = parse_url(str_replace('www.', '', $_SERVER['HTTP_REFERER']));



if ($ref['host'] == $site_to_block)

{

    //bad referrer detected, exit script

    print "Access Denied"; 

    exit;

} 

On a sidenote from php.net

The address of the page (if any) which referred the user agent to the current page. This is set by the user agent. Not all user agents will set this, and some provide the ability to modify HTTP_REFERER as a feature. In short, it cannot really be trusted.

[crazytrain]

Perfect! Thanks so much for the help Nico