From owner-freebsd-isp  Tue May 21  2:51:32 2002
Delivered-To: freebsd-isp@freebsd.org
Received: from arnold.neland.dk (0x3ef34d96.albnxx2.adsl.tele.dk [62.243.77.150])
	by hub.freebsd.org (Postfix) with ESMTP id 9802D37B411
	for <freebsd-isp@freebsd.org>; Tue, 21 May 2002 02:51:27 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1])
	by arnold.neland.dk (8.12.2/8.12.2) with ESMTP id g4L9pnG9043359
	for <freebsd-isp@freebsd.org>; Tue, 21 May 2002 11:51:50 +0200 (CEST)
	(envelope-from leifn@neland.dk)
Date: Tue, 21 May 2002 11:51:49 +0200 (CEST)
From: Leif Neland <leifn@neland.dk>
To: <freebsd-isp@freebsd.org>
Subject: OT: FormMail.pl, HTTP_REFERER
Message-ID: <20020521114934.C43244-100000@arnold.neland.dk>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-isp.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-isp>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-isp>
X-Loop: FreeBSD.org

FormMail.pl checks for HTTP_REFERER, if it's there, and allows (ab)use if
it is not.

With modern browsers, can I be sure HTTP_REFERER is set when FormMail.pl
is called from a form?

Leif



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message