php referrer script to block people not coming from my domain

steve51184 · 10-09-2008, 06:11 PM

hi there i need a php referrer script to block people not coming from my domain as i have a script that is password protected via .htaccess but people are giving the password out and i need a way to block people from visiting the script IF they didn't dome from my domain.com how do i do this?

also it doesn't have to be in php i'm more then happy to do it via .htaccess

j-ray · 10-10-2008, 03:00 AM

you need sth like that in the httpd.conf

Deny from all
Allow from host.example.com

This link may be ehelpful anyway
http://httpd.apache.org/docs/2.0/howto/auth.html

steve51184 · 10-10-2008, 03:07 AM

that will only allow my site to access my site (ie. Allow from mydomain.com) and not a user who came from a specified url so it's not what i'm after but thanks for trying

j-ray · 10-10-2008, 03:29 AM

you can specify any url there and as many as you like.
The referrer is not always available in the user agent so not a reliable thing.
I guess you need some more personal authentication done by a scripting language...

steve51184 · 10-10-2008, 02:16 PM

but that will only allow a predefined domain or ip address from accessing my site and that is not what i want.. i want people that CAME from my domain (ie visitors) to be able to access a certain script on my site

again thanks for the help but it's not what i'm after

zeos · 10-10-2008, 03:09 PM

Use mod_rewrite....

something along these lines of...(test it thoroughly yourself )

<Directory "/path/to/scriptdir">
Order Allow,Deny
Allow From All
RewriteEngine On
RewriteCond %{HTTP_REFERER} !^http://www.mydomain.com [NC]
RewriteRule myscript.php - [L,F,NC]
</Directory>

steve51184 · 10-11-2008, 10:30 AM

PERFECT thank you