Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > ASP General > HTTP REFERER bug?

Reply
Thread Tools

HTTP REFERER bug?

 
 
Travis Pupkin
Guest
Posts: n/a
 
      01-24-2004
Hi,

I built a site half a year ago with form that submits to page that
processes the info and then returns the user back to the page they came
from using HTTP_REFERER.

There's one guy -- using an identical set-up to our main testing
platform -- who kept getting the "URL required" error when doing this.
For some reason, on his system alone, HTTP_REFERER was not collecting
any referring URL.

Is it common for HTTP_REFERER to wuss out like this? What causes it?
 
Reply With Quote
 
 
 
 
Aaron Bertrand [MVP]
Guest
Posts: n/a
 
      01-24-2004
Plenty of things.
http://www.aspfaq.com/2169

--
Aaron Bertrand
SQL Server MVP
http://www.aspfaq.com/




"Travis Pupkin" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) t...
> Hi,
>
> I built a site half a year ago with form that submits to page that
> processes the info and then returns the user back to the page they came
> from using HTTP_REFERER.
>
> There's one guy -- using an identical set-up to our main testing
> platform -- who kept getting the "URL required" error when doing this.
> For some reason, on his system alone, HTTP_REFERER was not collecting
> any referring URL.
>
> Is it common for HTTP_REFERER to wuss out like this? What causes it?



 
Reply With Quote
 
 
 
 
Blair Bonnett
Guest
Posts: n/a
 
      01-25-2004
From what I gather though, it is from a form (either POST or GET) - so the
referrer should be there. The fact that others successfully use it also
suggest the problem is not on that page.

What is most likely to be happening is that he is running a firewall
(Norton AV is notorious for this) which is stripping out the referrer
information. Ask them to disable Privacy Control and see if that works.

By the way, can anybody come up with a good explaination why removing the
referrer increases your security?

Blair


Aaron Bertrand [MVP] <(E-Mail Removed)> wrote in article
<#(E-Mail Removed)>...
> Plenty of things.
> http://www.aspfaq.com/2169
>
> "Travis Pupkin" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) t...
> > Hi,
> >
> > I built a site half a year ago with form that submits to page that
> > processes the info and then returns the user back to the page they came
> > from using HTTP_REFERER.
> >
> > There's one guy -- using an identical set-up to our main testing
> > platform -- who kept getting the "URL required" error when doing this.
> > For some reason, on his system alone, HTTP_REFERER was not collecting
> > any referring URL.
> >
> > Is it common for HTTP_REFERER to wuss out like this? What causes it?

 
Reply With Quote
 
Steven Burn
Guest
Posts: n/a
 
      01-25-2004
> By the way, can anybody come up with a good explaination why removing the
> referrer increases your security?


Absolutely nothing I can think of (except making it harder for us poor
webmasters to figure out who's coming from where, lol)

--
Regards

Steven Burn
Ur I.T. Mate Group
www.it-mate.co.uk

Keeping it FREE!

Disclaimer:
I know I'm probably wrong, I just like taking part ;o)


Blair Bonnett <(E-Mail Removed)> wrote in message
news:01c3e30c$1781c880$2e9460cb@default...
> From what I gather though, it is from a form (either POST or GET) - so the
> referrer should be there. The fact that others successfully use it also
> suggest the problem is not on that page.
>
> What is most likely to be happening is that he is running a firewall
> (Norton AV is notorious for this) which is stripping out the referrer
> information. Ask them to disable Privacy Control and see if that works.
>
> By the way, can anybody come up with a good explaination why removing the
> referrer increases your security?
>
> Blair
>
>
> Aaron Bertrand [MVP] <(E-Mail Removed)> wrote in article
> <#(E-Mail Removed)>...
> > Plenty of things.
> > http://www.aspfaq.com/2169
> >
> > "Travis Pupkin" <(E-Mail Removed)> wrote in message
> > news:(E-Mail Removed) t...
> > > Hi,
> > >
> > > I built a site half a year ago with form that submits to page that
> > > processes the info and then returns the user back to the page they

came
> > > from using HTTP_REFERER.
> > >
> > > There's one guy -- using an identical set-up to our main testing
> > > platform -- who kept getting the "URL required" error when doing this.
> > > For some reason, on his system alone, HTTP_REFERER was not collecting
> > > any referring URL.
> > >
> > > Is it common for HTTP_REFERER to wuss out like this? What causes it?



 
Reply With Quote
 
Aaron Bertrand [MVP]
Guest
Posts: n/a
 
      01-25-2004
> By the way, can anybody come up with a good explaination why removing the
> referrer increases your security?


Not security, but privacy. Imagine I come to your site directly from
playboy.com, and you log that referer information. During that session I
register for something on your site, and you associate that referer
information with my e-mail address.

Later, you sell my e-mail address, along with the information about what
sites I visit regularly, to porn spammers (or maybe Playboy directly).


 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
http referer exxos Javascript 3 03-03-2005 05:48 PM
No referer page for SWF files Kevin Spencer ASP .Net 1 10-27-2004 11:15 PM
How do I clear the "Referer" header? =?Utf-8?B?TWlsYW4gTmVnb3Zhbg==?= ASP .Net 4 08-18-2004 11:56 PM
Disabling Referer HTTP Header in IE / IIS 5 / ASP Stuart ASP General 0 02-26-2004 02:51 PM
Re: How to Spoof Referer URL dave wanta ASP .Net 1 07-07-2003 07:46 AM



Advertisments