How do you set the referrer URL in IE

[Herb191]

This is what I have been trying:

#include <IE.au3>

$oIE = _IECreate("http://google.com")
_IELinkClickByIndex($oIE, 4)
$Obj = _IEDocGetObj($oIE)

$referrer = $Obj.referrer
ConsoleWrite("The referrer URL is " & $referrer & @CRLF)

;this does not work
;$Obj.SetRequestHeader("referrer", "http://yahoo.com")

;or this
;$Obj.referrer = "http://yahoo.com"

;$referrer = $Obj.referrer
;ConsoleWrite("The referrer URL is now " & $referrer & @CRLF)

[Mithrandir]

Maybe this

$referrer = _IEPropertyGet($oIE, "refferer")

[Herb191]

Maybe this

$referrer = _IEPropertyGet($oIE, "refferer")

No that won't set the referrer URL there is nothing in _IEPropertyGet or _IEPropertyset that will set the referrer URL (as far as I know).

[JohnOne]

There is in _IEPropertyGet, that is plain to see in the help file.

But I imagine it will be a little more difficult to try to spoof a referrer, which I think would be

done via HTTP

[Herb191]

which I think would be done via HTTP

Yep, I have done this with the WinHttp UDF but for what I am doing I also need some of the options that only the IE UDF can provide. Things like interacting with Javascript. I can't image that their is not a way of tricking IE into do the same thing.

[DicatoroftheUSA]

I hope you are just testing the security of your website, are there any servers that don't detect that exploit anymore?

[Mithrandir]

I hope you are just testing the security of your website, are there any servers that don't detect that exploit anymore?

What exploit are you referring to? If it's getting the referrer I don't see how can it pose a security risk.

[DicatoroftheUSA]

It used to be not uncommon for websites to use a type of synergistic log in, where you could log in to one site or sub-domain of a site, and then through referrer it would indicate your log in status, if you knew the version of web server, you could assume they used the defaults and spoof it into thinking that you were already logged in. I don't think any web servers do it that way anymore