All geek questions in one place

How do you cheat on HTTP_REFERER?

I need to try and trick HTTP_REFERER passed my other page so that on the landing page I can determine that the request comes from the "right" page and follows the corresponding logic.

  • How do I do this in JavaScript (AJAX)?
  • Can I do this in ASP.Net?

Tia rams

+3
source share
3 answers

Generally speaking, you cannot force other browsers to return false HTTP_REFERER without an exploit, plugin, or other extension. If you want to change the value sent from your web browser and you are using FireFox, check out the Modify Headers extension .

HTTP_REFERER. , HTTP_REFERER .

+9

, "" , . , , . URL- , "", , , .

+2

, . HTTP_REFERER , ( , javascript, ).

(, "Referer:" ), , curl wget, BSD Linux ( OS/X). MS Windows, wget Cygwin.

    wget -O - --referer="http://example.com/some/path" http://example.com/


    curl -e "http://example.com/some/path" http://example.com/

, -, "" , . , ( "B" ) , ( "A" ), .

If you store a session cookie, you can insert some logic into page "A", which sets the boolean variable. Then add logic to page "B", which checks to see if the variable has been set.

I will leave this as an exercise for the reader to figure out how to do this in ASP.NET. (Because I'm a PHP programmer. -])

+2
source

Source: https://habr.com/ru/post/1704308/

More articles:


All Articles