Hello all,
We have been getting a lot of emails, asking us how you can protect agains automated robots submitting junk to your guestbooks. Bellow is a simple solution for this problem:
Copy and past this function into the file "functions.php", just before the ending php close tag:
Code:
function check_referer($referers)
{
// If there are any referrers in the list ...
if (count($referers))
{
$found = false;
// Use the browsers referrer header.
$temp = explode("/",getenv("HTTP_REFERER"));
$referer = $temp[2];
if ($referer=="")
{
$referer = $_SERVER['HTTP_REFERER'];
list($remove,$stuff)=split('//',$referer,2);
list($home,$stuff)=split('/',$stuff,2);
$referer = $home;
}
// Check agains list.
for ($x=0; $x < count($referers); $x++)
{
if (eregi ($referers[$x], $referer))
{
$found = true;
}
}
// Refererer is blank.
if ($referer =="")
$found = false;
if (!$found)
{
// You might alter this to print some sort of error of your own.
echo "<b>You are submitting entry from an <b>unauthorized domain.</b><br><br>";
}
return $found;
}
else
{
return true;
}
}
?>
Also, open the file "add.php", and place the following code on line 28, right after the "include("header.inc");" line;
Code:
$referers = array ('domain.com','www.domain.com','111.111.111.111');
if (!check_referer($referers))
{
// Form was not submitted from the site so exit
echo "<center><br><a href=\"javascript:history.go(-1)\" class=\"text\"><font color=red>NICE TRY! NOW GET LOST!</font></center>";
include("footer.inc");
exit;
}
Make sure to replace:
domain.com -> YOUR ACTUAL DOMAIN
www.domain.com
-> YOUR ACTUAL DOMAIN WITH WWW
111.111.111.111 -> THE ACTUAL IP OF YOUR DOMAIN (SERVER)
