YOURLS plugin to hide referrer (HTTP referer) when redirecting
PHP
Switch branches/tags
Nothing to show
Clone or download
Pull request Compare This branch is 5 commits ahead of YOURLS:master.
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
README.md
plugin.php

README.md

Hide Referrer

Plugin for YOURLS.

Description

This plugin lets you hide (all but the last) referrer (HTTP referer header) when redirecting. This can be useful for security and integrity reasons, for example to avoid sending sensitive querystrings to an external site. Note that on some browsers when using http, the last referrer will always be sent, which will be the YOURLS short url. Using HTTPS on all redirects ensures a hidden referrer on all browsers tested.

The plugin works either by adding a prefix to existing short urls, or on ALL redirects (default).

What will be hidden

Browser Hides referrer
Chrome All
Firefox http All but last
Firefox https All
IE http All but last
IE https All

(As of May 2015)

Installation

  1. In /user/plugins, create a new folder named hide-referrer.
  2. Drop these files in that directory.
  3. Customize the plugin by editing the two variables at the top of plugin.php as needed.
  4. Go to the Plugins administration page ( eg http://sho.rt/admin/plugins.php ) and activate the plugin.
  5. Have fun!

Disclaimer

The referrer header is controlled by the web browser, so methods used in here can stop working at any time.

License

Do whatever the hell you want with it.

Support

If you find a problem, add an issue on GitHub, or better, submit a pull request.