Mitchell Stoltz wrote: > In general, you shouldn't write > applications that depend on referrer headers, because user agents can > always opt not to send them.
...or even send faked ones, so a referer is no real protection.
--
"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
-- Benjamin Franklin
