So i dont have to add the subdomain in the referrer.

No i dont have any Hotlink protection.

Its weired, i'm blaming his firewall settings,

Ive asked him for all the info he can give me before
we start chasing a wild goose chase,

For now : Should i add my subdomin to the reffer check ?

I have several users in this situation. They've disabled their firewall and looked for anything that would prevent the referrer. Some are computer illiterate.. so it's an uphill (and very frustrating) battle. And yes, I have both www and non-www in the allowed domains input. My community is starting to mutiny over all the issues. They want UBB.c back.

You could turn off the referrer check and see if that clears up the problems. Rick said Threads was probably the only forum software to use it, so while a nice feature, it's not critical...

I have an external Login Problems page,
which links them to Nortons Web Site

Adding Trusted Sites - Click Me

Its more to do with Parental Control if enabled.

Hope that helps...

--------------

Anyone - should i add my subdomain to the reffer ?
See posts above.

If the referer check is causing major issues, go ahead and turn it off. The check itself isn't foolproof as it relies on the referer variable. It basically is a bit of an attemp to help with spammers, but most good spammers can spoof the referer variable anyways.

I guess I'm confused at what the referrer check is trying to attempt. Don't the scripts check to see if the 'entity' trying to post is logged in with a valid user ID and password? Isn't that enough to quell spammers?

Basically the referer check tries to make sure addpost is being called from the newpost/newreply script on your server. A true spammer wouldn't actually fill out the newpost/newreply forms. They'd look and see what fields are necessary to pass to the addpost script and write their own spam script that would just pass those variables totally bypassing the forms.

Normally, when a user is browsing your forum, each request they make comes with a referer variable that shows where they are coming from. A common script kiddie might try and write a spam script but not know how to spoof the referer variable, so that would spoil their attempt. Someone that has a bit more knowledge would know how to do it properly, so it wouldn't stop them. That's why I say it's not foolproof. It prevents the boneheads from spamming, but not the smart ones

And you are correct in that if all your forums require people to be logged in to post, then the referer check holds even less value as they need to actually be online to post and can't really do a remote script.

The referrer check is only for domains which are allowed to make posts to your forum; unless you have another forum setup at that subdomain and want it to be able to post to your main UBB.threads install, you don't need it added to the referrer check.



Theres several things that can be at issue, not just a firewall; some people have "Internet Security Suites", Virus Scanners, and (usually) firewall's that can block items; keep in mind too that some people have no clue what they're doing and have their kids do everything for them, so that may also be an issue (whos to say their kid installed something and they have no clue its even there).

While turning this off to test is a great idea, imo keeping it off is a spam risk (which it was added to halt the spam issues that a lot of people, including me in UBB.C, where having).

Rick has pretty much explained everything though ;)...