RE: [PHP] security

[Boget, Chris]

> check HTTP_REFERER. If it's not your server. toss it. It's 
> not the most secure way but check the page, there are other 
> variables you can use to accomplish the same thing.

Even better (and it'll *always* work as far as I know), check 
$HTTP_HOST.

Chris