RE: [PHP] "Authenticating" across sites/servers

[Boget, Chris]

> Also, you can check the value of $HTTP_REFERER for the ip of 
> the trusted host, to further eliminate the potential.

How do you get the IP out of $HTTP_REFERER?  As far as I know,
that only tells you the referring url, not the ip address.  And couldn't
that value be messed with?

Chris