[morlack]

Now I'm sure there are better more sophisticated ways to do this.
But I'm a php noob so here we go :

Code:
// the URL of the submission form
$formURL = array('http://www.blah.biz/testform.php', 'www.blah.biz/testform.php', 'blah.biz/testform.php');

// prevent off-site use
if ($HTTP_REFERER != $formURL) {
die("Illegal use.");
}


The scripts returns "Illegal Use" eveytime although I come from page specified in $formURL.

Can someone help?

[NeverMind]

try using this :

PHP Code:

// prevent off-site use

if ($HTTP_REFERER !== $formURL) {

die("Illegal use.");

} 

use double equals for any IF statment..

[morlack]

if(strpos($_SERVER["HTTP_REFERER"], "blah.biz/testform.php") === FALSE)
die("Illegal use");

as does:

if( !in_array($_SERVER["HTTP_REFERER"], $formURL )
die("Illegal use.");


The above works well.

I didn't get to try your code yet but I will do - thanks Nevermind!

[joachimseitz]

your first one done work because its an array

!== dont think that works

i have a question to this as well

$_SERVER["HTTP_REFERER"]
doesnt work for everyone, dont ask me why but it doesnt, can someone tell me how for example to make it work on IE?