Official Everybody Edits Forums

rdash

Member

Joined: 2015-02-25

Posts: 39

Can we disable HTTP referer checking on the forums?

Referers are easy to spoof and a gross violation of the forum users' privacy. Why is it enabled?

---

rdash

XxAtillaxX

Member

Joined: 2015-11-28

Posts: 4,202

Re: Can we disable HTTP referer checking on the forums?

It's used by FluxBB to prevent against XSRF attacks.

---

*u stinky*

Anatoly

Guest

Re: Can we disable HTTP referer checking on the forums?

its your 42 post, inverted, btw. your sig "you think you're clever?"

On-Topic: why do you care if its https or http? (if thats what the topic is about, my english is... NOT BAD!!)

Different55

Forum Admin

Joined: 2015-02-07

Posts: 16,575

Re: Can we disable HTTP referer checking on the forums?

It's exactly as Atilla says. If we didn't do that, people could craft links and web pages that could trick your browser into doing things like making posts and editing your profile. HTTP referrers aren't logged (actually that's a lie, I believe Apache logs those in the access logs by default), no privacy is being invaded here except by the ads which are watching you sleep at night.

If you're concerned about your privacy, set your browser (or get an extension) to only send a referrer if the site you're being referred from is on the same domain. 0 privacy risk, and no features broken either.

---

"Sometimes failing a leap of faith is better than inching forward"
- ShinsukeIto

Gosha

Member

From: Russia

Joined: 2015-03-15

Posts: 6,211

Re: Can we disable HTTP referer checking on the forums?

why do you care if its https or http?

https is a secure http.

it's all about privacy and personal info