Re: The Archive and version compatability

new topic     » goto parent     » topic index » view thread      » older message » newer message
jeremy said...
Kat said...

Sorry to say, but due to an incident on irc, i won't be putting the db access online. I deleted the entire dir off the host, a host i just paid for.

I also won't be completing http.e, or submitting any other code. This will make more than one person happy as h, i know. I refuse to be drawn into more defensive positions. You want it?, you code it, you fight for it.

I'm trying to protect the #euphoria IRC channel as it's a valuable resource for Euphoria, otherwise I wouldn't respond here. But the incident was one person on IRC stating that during a GET or POST request via HTTP, that the referrer should not default. If it is not present, then it should not be given in the HTTP headers. The official specification supports this claim. Kat's experience has been that she has been blocked downloading items that have no referer, the other claimed that some web hosts block spoofed referrer headers because it's often used in spam bots. Nothing bad was said only a disagreement as to which was right.

Jeremy

A valid on-site header trumps no header. It's not about spoofing anything with malicious intent. It's not about malformed header lines. And sending the host address as the referer: tag does no harm. There is code to allow the http.e user to set the line to anything desired (except "", currently), just like setting the user-agent: line. I offered to code to allow "" be set, so the referer would not be sent, but that was declined.

I point out that using http.e with a user-agent line of anything other than http.e is worse than specifying the host name as referer.

I've run across domains before that allowed page views (yes, that is a "download") *only* if refered to by another page on their domain, which meant that bookmarking the desired page didn't work, shortcuts didn't work, offsite references by other hosts didn't work, the domain in question missed one or two web ad hits, etc etc etc.. Making life easier by sending the domain name of the host you are accessing hurts no more than http.e having :

public procedure set_sendheader_useragent_msie() 
	set_sendheader("User-Agent","Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)") 
end procedure 

in it, or me coding

{"User-Agent",": ","Opera/5.02 (Windows 98; U) [en]"}, --</joke> pick your own smile 

Frying my tail over something this trivial tells me just how much i am:

useless

new topic     » goto parent     » topic index » view thread      » older message » newer message

Search



Quick Links

User menu

Not signed in.

Misc Menu