aboutstudy/Web-Security-Filter
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

兼容客户端POST请求，处理没有HTTP_REFERER参数情况

Browse Source
This commit is contained in:
JiangCY
2012-10-30 15:37:36 +08:00
parent 12bd724d5e
commit 882d1a4c45
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
security_filter.php
View File

@@ -28,11 +28,15 @@ function global_filter()
//处理跨域POST提交问题
if($_SERVER['REQUEST_METHOD'] == 'POST')
{
$url = parse_url($_SERVER['HTTP_REFERER']);
$referer_host = !empty($url['port']) && $url['port'] != '80' ? $url['host'].':'.$url['port'] : $url['host'];
if ($referer_host != $_SERVER['HTTP_HOST'])
//处理客户端POST请求处理没有HTTP_REFERER参数问题
if(isset($_SERVER['HTTP_REFERER']))
{
header_status_404();
$url = parse_url($_SERVER['HTTP_REFERER']);
$referer_host = !empty($url['port']) && $url['port'] != '80' ? $url['host'].':'.$url['port'] : $url['host'];
if($referer_host != $_SERVER['HTTP_HOST'])
{
header_status_404();
}
}
}