[phorm] [Phorm:] Re: Restricting the Referer

  • From: webbbs@xxxxxxxxx
  • To: support@xxxxxxxxx
  • Date: 15 Jan 2003 15:34:13 -0000

The following new message has been posted on Phorm Support Forum at 
<http://www.phorm.com/support/>. 

*************************************************************************** 

  MESSAGE:  (#2069) Re: Restricting the Referer 
            <http://www.phorm.com/support/?rev=2069> 
  AUTHOR:   Holotech 
  DATE:     January 15, 2003 at 10:34 a.m. EST 

  Reply To: (#2063) Restricting the Referer 
  Author:   Jason 
  Date:     January 15, 2003 at 12:54 a.m. EST 

> Based on that I created the following: 
> $PHORM_REFERER = 
> 
"|www.lagllc.org/forms/rma_frm.htm|http://www.lagllc.org/forms/rma_frm.htm|http://lagllc.org/forms/rma_frm.htm|";
 

Do not include "http://";. Just the domains and optionally the files. 

> When I ran Phorm I received the following error: 
> 080 - Invalid access. This Phorm installation cannot 
> be accessed from 
> [http://www.lagllc.org/forms/phorm.php]. 

This would happen with a multi-part form, since the second and subsequent 
pages are actually being displayed by Phorm. So, you would need to include 
domain.com/phorm.php in your $PHORM_REFERER. 

> It appears that you can not simply lock down just a 
> domain and a specific subdirectory 

That's correct - you can specify an entire domain, or specific files. You 
cannot specify a directory. I may add that capability. 

*************************************************************************** 

This is an automatically-generated notice.  If you'd like to be removed from 
the mailing list, please visit Phorm Support Forum at 
<http://www.phorm.com/support/>, or send your request to webbbs@xxxxxxxxxx  If 
you wish to respond to this message, please post your response directly to the 
board.  Thank you! 
-------------------------------------------------
You are receiving this message because you are subscribed to the Phorm mailing 
list. To send messages to the mailing list, simply send email to 
phorm@xxxxxxxxxxxxx from the address you have subscribed. You may unsubscribe 
from the list by sending email to phorm-request@xxxxxxxxxxxxx with 
'unsubscribe' in the SUBJECT field.

Other related posts: