Re: FN-FORUM: Any way to detect where a user has been redirected from in PHP?

date posted 1st November 2007 14:26

Dom,

With two full URLs in a link, won't that run the risk of pinging =20
the anti-phishing filters on IE7 ?

I don't know for sure, and haven't tried it, but I thought that was =20
one of the big things with phishing, having URLs that start off =20
looking legit then go off somewhere else ( like =20
[EMAIL REMOVED] , or whatever )

Alex
http://www.ozbon.com


Quoting Dom Latter [EMAIL REMOVED]

>
> On Thursday 01 November 2007 15:48:18 Ben Nolan wrote:
>> Hiya,
>>
>> Throughout the site which got smooshed yesterday are a load of
>> header('Location: blah'); redirects which point at the login page.
>> Does anyone know of a way to detect the URL of the page which contains
>> that line? HTTP_REFERER seems only ever to contain the page which
>> pointed at the page which redirected you, rather than the page itself.
>>
>> I'm asking this 'cause I'd rather not rewrite all the references to
>> Location: blah to include the calling URL in a get query. :/
>
> One line of bash script will do it, if you want to be really smart-arsed,
> to change all of them to this:
> header('Location: login.php?from=3D);
>
> --
> Freelancers, contractors earn more with Prosperity4
> Call 0870 870 4414 or visit www.prosperity4.com
> and benefit from Inland Revenue approved expenses today.
>
> To advertise here: http://www.freelancers.net/advertising.html
>
>