Question

Take a look to this function please

function CheckHost()
{
    $url = parse_url($_SERVER['HTTP_REFERER']);
    $host = $url['host'];
    if($host == $_SERVER['SERVER_NAME'])
        return true;
    return false;
}

i saw it somewhere, but can’t understand it’s usage.

is it for security reasons, or what?(as i see, it just verify is the last request from the same server as the script)

Thanks for attention

Answer 1

I suppose it’s a simple check against cross-site request forgeries (CSRFs), or as others say, hotlinking. The PHP script calling this function would have to be executed on every HTTP request to the server in order to check for hotlinking, though.