#7 Requests from Invalid and Valid domains

Next_Release
open
nobody
Backend (7)
5
2012-10-05
2005-09-14
No
  • Add a check for valid domain requests
    if the request is from a not valid domain
    -display appropriate error messages
    -log the requests

Discussion

  • Paige Sullivan
    Paige Sullivan
    2005-09-17

    Logged In: YES
    user_id=612671

    Based on my research, while IE and Opera's XMLHTTP
    object does send the address of the original page to the
    backend, the XMLHTTP object implemented in Firefox and
    Netscape does not. So, simply looking at the referrer won't
    work. We want to architect a solution that will work across
    all the major browsers, now and in the future.

    We're thinking about it - and if you want to do the same - let
    us know of any ideas or test results you come up with.

     
  • Paige Sullivan
    Paige Sullivan
    2005-12-28

    Logged In: YES
    user_id=612671

    Working on Authenication & Authorization module. Will be
    included in later release(s).