Click to See Complete Forum and Search --> : Preventing direct access using htaccess


mr_bill
04-08-2009, 06:08 PM
Right now if you use a query in the url bar like this you can get the results without using the captcha on my site.

http://example.com/results.php?s=google.com&q=1

I need to make it so that this can only be ran from my site. So somehow if the page header is not from my site they would get sent to the home page of the site

Something like this script does but I dont know how to make match my sites link pattern

RewriteCond %{HTTP_REFERER} !^http://(www\.)?example.com(/)?.*$ [NC]
RewriteRule .*\page.php$ http://www.example.com [R,NC]

Scleppel
04-16-2009, 06:22 PM
Right now if you use a query in the url bar like this you can get the results without using the captcha on my site.
Then your CAPTCHA is implemented incorrectly.

RewriteCond %{HTTP_REFERER} !^http://(www\.)?example.com(/)?.*$ [NC]
RewriteRule .*\page.php$ http://www.example.com [R,NC]
The HTTP Referer header is unreliable. If you block users typing the URL in the address bar of their browser you will block legitimate users that do not send the Referer header.