 |
 |
|
|
PERL/CGI Books |
|
How to Spoof HTTP_Referer
(or any other browser passed variable)
|
Try the following:
(The example below assumes your homepage is index.html)
telnet www.yoursite.com 80 (press return)
GET /index.html HTTP/1.0 (press return)
Referer: http://www.hah-hah.com (press return)
(press return again)
Now, check your server logs and you'll see that "someone" from hah-hah.com grabbed your homepage.
If you are trying to "protect" a file by making sure that the referer value (or any other browser passed variable) is your own website, you can be bypassed by this simple technique. You cannot trust any browser passed variables.
|
Other resources on Spoofing and Hacks |
||
|
|
|
|
|
|
||
 Programming Perl Beginners |
 Learning Perl Writers |
 Perl Cookbook Learn by Example |