除了PHP中的一个IP之外，如何防止访问脚本？

Question

I have a static form on a server that does not support php:

<form action="http://otherserver.com/process_form.php"

I need the script on the file process_form.php to only be processed if the request is being sent by the static IP of the server on which the static form is hosted. How to do this?

If anyone other then that ip is attempting to request the script the script should be killed immediately.

Answer 1

This will not work the way you want because the IP will be that of the client, never the server on which the form is hosted.

You are looking to test the

$_SERVER["HTTP_REFERER"]

header variable. That will tell you which page the originating form was hosted on - however, it is not safe. This header is set by the client, and can be freely manipulated.