Simple fake referer script

pasenseoso said:

is there a way to make the url look cleaner?

Click to expand...

<?php
if(isset($_GET["go"])){
  $url = $_GET["go"];
  header("location: $url");
  exit();
}
?>

39ster said:

Name the file "fakereferer.php" and copy paste this script into the file:

Code:

<?php

function removeqsvar($url, $varname) {
    return preg_replace('/([?&])'.$varname.'=[^&]+(&|$)/','$1',$url);
}

if(isset($_GET["l"]))
{
    $url = $_GET["l"];
    setcookie("redirect", $url);
    $newRequest = removeqsvar($_SERVER["REQUEST_URI"], "l");
    
    if(substr($newRequest, -1) == "?") {
        $newRequest = substr($newRequest, 0, strlen($newRequest) - 1);
    }
    
    $redirectUrl = "http://" . $_SERVER["SERVER_NAME"] . $newRequest;
    header("location: $redirectUrl");
    exit();
} else if(isset($_COOKIE["redirect"]))
{
    $url = $_COOKIE["redirect"];
    setcookie("redirect", "");
    echo "<script>window.location.replace(\"$url\")</script>";
    exit();
}
?>

...and put it where?

On your white hat site, put this at the top of the php page (after the "<?php" line) that will be used as the fake referer

Code:

include("fakereferer.php");

"<?php" - there is no such line on MY white hat page. yeah that line exists on that script, but again, where does that script go? the root folder and the white hat page?

Click to expand...

39ster said:

In the same folder that the white hate page is in.

If there's no line for that, then your white hat page isn;t using PHP. Is the extension .html or .php?

Click to expand...

<?php
include("fakereferer.php");
?>