20
the only reason it would do that is if in_array is false, change the code to add the following debugging line:
//List of allowed domain referrals seperated by comma
$allowed_domains = array('www.domain1.com', 'www.domain2.com');
//Was HTTP_REFERER set by browser?
if ($_SERVER['HTTP_REFERER']) {
$ref_info = parse_url($_SERVER['HTTP_REFERER']);
[color=008000][b]print_r($ref_info);[/b][/color]
//Check that REFERER is in the list of allowed domains
if (! in_array($ref_info['host'], $allowed_domains)) {
redirect_header('index.php', 4, 'Invalid HTTP_REFERER host');
exit();
}
} else {
// HTTP_REFERER was not sent by browser, display error
redirect_header('index.php', 4, 'HTTP_REFERER not sent by browser');
exit();
}
Check that the value for $ref_info['host'] is in the list of allowed domains. Once done that debugging line can be removed.
