OK, session vars will do the trick for you, as will checking that $_SERVER['HTTP_REFERER'] is correct.
Try http://dev.danen.org/test/access_test.htm (which is VALID) vs. http://portal.danen.org/access_test.htm which is invalid. If that's what you want, I'll post the code. Gerry On 6/28/06, J Siegel <[EMAIL PROTECTED]> wrote: > > First explain how I could run YOUR script from MY site. I think that > > is what you are asking, no? > > > > If you look inside an html page, javascript code, Flash decompiling, > etc., you can easily see how to call a specific php script on the site > that is accessing your database. From that, it isn't very difficult > to figure out how to make your own accesses to the php script from > somewhere else. > > I only want people to access my database when they are actually on my > site. > > > > > > > > > The php_mysql group is dedicated to learn more about the PHP/MySQL web > database possibilities through group learning. > Yahoo! Groups Links > > > > > > > -- Gerry Danen Developer support: http://dev.danen.org/ http://groups.yahoo.com/group/php_and_mysql/ Lily Register: http://www.lily-gallery.com/ ------------------------ Yahoo! Groups Sponsor --------------------~--> Yahoo! Groups gets a make over. See the new email design. http://us.click.yahoo.com/XISQkA/lOaOAA/yQLSAA/CefplB/TM --------------------------------------------------------------------~-> The php_mysql group is dedicated to learn more about the PHP/MySQL web database possibilities through group learning. Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/php_mysql/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
