ASP,PHP与.NET伪造HTTP-REFERER方法及防止伪造REFERER方法探讨
HTTP-REFERER这个变量已经越来越不可靠了，完全就是可以伪造出来的东东。
以下是伪造方法：
ASP:
dim http
set http=server.createobject("MSXML2.XMLHTTP") '//MSXML2.serverXMLHTTP也可以
Http.open "GET",url,false
Http.setRequestHeader "Referer","http://www.devdao.com/"
Http.send()
PHP(前提是装了curl):
$ch = curl_init();
curl_setopt ($ch, CURLOPT_URL, "http://www.devdao.com/xxx.asp");
curl_setopt ($ch, CURLOPT_REFERER, "http://www.devdao.com/");
curl_exec ($ch);
curl_close ($ch);
PHP...[ 查看全文 ]
2016-02-19
标签:
