Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I have a php page “server1.com/page1.php” (not real) and another page “server2.com/page2.php”
page1.php response according to the parameter passed by URL which can come from any server.
but how can i check that whether “server1.com/page1.php” is called from “server2.com/page2.php” or not.
thanks in advance
There are many ways this could be implemented.
This easiest way is to check the $_SERVER[‘HTTP_REFERER’] to see if it matches, although this is not 100% reliable, and is not true security.
A second method would be to use PHP’s session functionality. This would require that the two servers use a shared session tracking area though, which is a much more advanced server setup.
A third method would be to use a shared MySQL server that both can access to verify requests. This will introduce latency, which may slow down the request a bit.
A fourth method would be to use a call back to the originating server to verify it did make the request. Server2 makes the request to Server1, then Server1 contacts Server2 and asks if the request it just received actually came from it.
A fifth method is to sign your request using a private/public key pair. This way you can verify for sure that the request came specifically from the server it claims it is.