On Monday 24 September 2001 16:04, Jeffrey Paul wrote:

Well. If you check the HTTP_REFERER on the target-site it would work and give 
you at least some "security". However it is still not really secure.



> At 07:08 AM 9/24/2001, Chris Herring wrote:
> >OOPS, again, elseif isn't what needs to be done.
> >
> >Ok, here we go.
> >
> >if $pwd == $real_pwd {
> >header ("Location: http://therealsite";);
> >} else {
> >header ("Location: http://badsite";);
> >}
>
> For the record, that won't stop someone from going to the destination page
> if the password doesn't match, which is what the person asked about.  All
> this will do is send them a redirect to an error page if the password
> doesn't match, it doesn't prevent anyone at all from hitting, in your
> example, http://therealsite.
>
> -j
>
>
> --------------------------------------------------------
> Jeffrey Paul      [EMAIL PROTECTED]      (877) 748 3467
> ICQ: 14295546     AIM: kw34hd1     NXTL/DC: 130*21*16749
> PGP: 0xF50BB9D7 A21AFD828C30EC77CCCC545DA0B3F501F50BB9D7

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to