UBB.threads PHP Forum Software Community Forums UBB.threads 7 Version 7 Support Have questions on Referer settings in Control panel

I have some issues upgrading to 7.4 already posted here. But I have a few questions about some settings. In the control panel are a few settings in the primary settings area that I am not sure what they do or what they are for.
1. Allow Multi-URL access.
2. Domains for HTTP Referer Check:
3. Disable HTTP Referer Check?

Can someone give me some remedial explanation on what these selections do? I know some have been there for quite some time but there does not seem to be a post to explain what is the real reason that I would enable/disable them. Or what I should input in say the Domains for HTTP Referer Check

The referrer check ensuresthat people are posting from your forums url.

Disable Referrer check turns the check off completely.

Domains for Referrer Check simply allows you to specify which domains are yours to allow in the check...

Multi URL access is for telling the forum to allow URLs which aren't your primary:
This means say, i have undergroundnews.com undergroundnews.net undergroundnews.org; where my primary url is set as undergroundnews.com with multi url access I can still access and login to undergroundnews.net and .org and stay logged into those domains; without multi-url access I will be redirected to undergroundnews.com

How else would they be able to post for instance I am posting this from
'[color:#CC66CC]https://www.ubbcentral.com/forums/u...oard/11/Number/218730/what/showflat.html'

also are there any dangers of people being able to post from other places....
[/color]

Just an old security check...

Some forms some places allow any "form" to submit data without any validation; so users could tweak variables to use data they're nto supposed to...

Myself I've never really had a problem with it :shrug:

Maybe I need more basic layman terms for my question.
I currently have the referer turned off due to members can't post when this is enabled and one of them is a admin in ver 7.2 (Don't know if they were not logged in after I enabled the change)
I am on a windows server.
The registered domain is http://www.iaeifl.org
My host control panel shows my friendly url is http://iaeifl.org
Both url's work from a browser.
Threads is installed at iaeifl.org/forums
I have a redirect in the root folder using the refresh meta tag to goto http://www.iaeifl.org/forums
Index.php is a default page.

If I install threads ver 7.4 what should I enter in the settings on my original post?

http://www.iaeifl.org|http://iaeifl.org

Thanks Gizmo. That is what I put in before and everyone barked.
Could it be when I changed it everyone was logged out because cookies were reset and they just did not notice it. As soon as 7.4.1 is out I will upgrade and I just wanted to set this so I don't have to tell everyone that they need to logon again after the upgrade then again after I change the setting.

Or maybe it is a windows issue. I know I can't enable spiders with the host I have.(Don't want to get into that.)

Some firewalls or antivirus applications will block the referrer variable from posting to a browser window; which would result in a referrer error with the forum... It is quite common and can be disabled in the offending program on a users machine

I agree but I deal with a lot of people that don't know what OS they have let alone what browser or internet security. I get a lot of issues just with forgotton passwords that I have to reset for them. Thank god it is a small board.

Just had this question come up from one of our users as well. It would be great if there were a way to allow either one of the valid domains or no referrer at all. A middle of the road option that would allow the improved security when possible, and still allow a user has a firewall that's filtering it (and they don't know how to setup an exception) to user the forums.