Gossamer Forum
(Advanced Search)
for
Home : General : Perl Programming :

$ENV{'HTTP_REFERER'}

Aug 25, 2001, 5:33 AM
Andy
Veteran / Moderator (18441 posts)
Andy's avatar
Aug 25, 2001, 5:33 AM
Post #1 of 8
Views: 5746
Shortcut
Quote Reply
$ENV{'HTTP_REFERER'}
Can someone please explain to me why I get no referer listed when people come from a https server? It just comes up blank. Is there a special ENV I need to use for comming off HTTPS servers?

Thanks

Andy

webmaster@ace-installer.com
http://www.ace-installer.com
Aug 25, 2001, 5:43 AM
Paul
Veteran (19537 posts)
Aug 25, 2001, 5:43 AM
Post #2 of 8
Views: 5627
Shortcut
Quote Reply
Re: $ENV{'HTTP_REFERER'} In reply to
Edit - won't let me delete
Aug 25, 2001, 6:01 AM
Andy
Veteran / Moderator (18441 posts)
Andy's avatar
Aug 25, 2001, 6:01 AM
Post #3 of 8
Views: 5719
Shortcut
Quote Reply
Re: $ENV{'HTTP_REFERER'} In reply to
Huh?

Andy

webmaster@ace-installer.com
http://www.ace-installer.com
Aug 28, 2001, 1:35 AM
Wil
Veteran / Moderator (4108 posts)
Aug 28, 2001, 1:35 AM
Post #4 of 8
Views: 5571
Shortcut
Quote Reply
Re: $ENV{'HTTP_REFERER'} In reply to
Andy

Does this help?

http://support.microsoft.com/...ticles/Q178/0/66.asp

Wil

Aug 28, 2001, 1:49 AM
Andy
Veteran / Moderator (18441 posts)
Andy's avatar
Aug 28, 2001, 1:49 AM
Post #5 of 8
Views: 5582
Shortcut
Quote Reply
Re: $ENV{'HTTP_REFERER'} In reply to
Mmm, that is great. So basically are they saying you can get the HTTP_REFERER, but only when going from a https server to another one, and not a http server?

Thanks, I finally have a clue why it won't work! Laugh

Andy

webmaster@ace-installer.com
http://www.ace-installer.com
Aug 28, 2001, 3:51 AM
Wil
Veteran / Moderator (4108 posts)
Aug 28, 2001, 3:51 AM
Post #6 of 8
Views: 5567
Shortcut
Quote Reply
Re: $ENV{'HTTP_REFERER'} In reply to
Yes. That's what they are saying. I knew there was an issue like this, but hadn't seen it documented before. It's a security issue, I guess...

Wil

Aug 28, 2001, 4:01 AM
Paul
Veteran (19537 posts)
Aug 28, 2001, 4:01 AM
Post #7 of 8
Views: 5574
Shortcut
Quote Reply
Re: $ENV{'HTTP_REFERER'} In reply to
Clearly having a secure server requires it to be secure. You don't want anyone being able to detect the secure referer hence http to http works or https to https (and maybe http to https).

Mods:http://wiredon.net/gt/download.shtml
Installations:http://wiredon.net/gt/
Aug 28, 2001, 5:49 AM
Wil
Veteran / Moderator (4108 posts)
Aug 28, 2001, 5:49 AM
Post #8 of 8
Views: 5539
Shortcut
Quote Reply
Re: $ENV{'HTTP_REFERER'} In reply to
You said...

You don't want anyone being able to detect the secure referer hence http to http works or https to https (and maybe http to https).

Why not? Sorry but that doesn't make any sense to me.

Wil