domain match

[Destramic]

hey guys im making a script where the user gets redirected...but im wanting to make sure the redirection is within the same domain and not being shipped off to another site when using ($_SERVER['HTTP_REFERER'])

 

now what im using seems to do the trick but im wondering if there is a better method of doing this?...i dont want to use regex either

 

thank you guys

<?php 

$match = strpos("http://127.0.0.1/login", $_SERVER['SERVER_NAME']);

if ($match && $match > 0 ||  $match === 0)
{
	echo "domain match";
}

?>

[QuickOldCar]

I guess this depends on how are actually doing it.

 

$_SERVER['HTTP_REFERER'] can be spoofed

 

You can do a check what the ip is though

$remote_ip = $_SERVER['REMOTE_ADDR'];
if (strstr($remote_ip, ', ')) {
    $ips = explode(', ', $remote_ip);
    $remote_ip = $ips[0];
}
if($remote_ip == "192.168.1.2"){ //use servers ip
echo "from my server";
}

Edited December 15, 2014 by QuickOldCar

[Destramic]

thank you for your post

 

i got what i was after using

if ($_SERVER['SERVER_NAME'] === parse_url($url, PHP_URL_HOST ) )
		{
			return true;
		}

thank you again