check.php
<span><</span><span>html</span><span>></span> <span><</span><span>body</span><span>></span> <span><</span><span>form </span><span>action</span><span>="test.php"</span><span> method</span><span>="post"</span><span>></span><span> message</span><span><</span><span>input </span><span>type</span><span>="text"</span><span> name</span><span>="name"</span><span> value</span><span>="123456"</span> <span>/></span> <span><</span><span>input </span><span>type</span><span>="submit"</span><span> value</span><span>="submit"</span> <span>/></span> <span></</span><span>form</span><span>></span> <span></</span><span>body</span><span>></span> <span></</span><span>html</span><span>></span>
test.php
<?<span>php </span><span>header</span>("Content-type:text/html;charset='utf8'"<span>); </span><span>error_reporting</span>(<span>E_ALL</span><span>); </span><span>$url</span> = <span>parse_url</span>(<span>$_SERVER</span>['HTTP_REFERER'<span>]); </span><span>//</span><span>print_r($url);</span> <span>if</span>(<span>$url</span>['host'] != "localhost"<span>){ </span><span>echo</span> "<script>alert('host error.');history.go(-1);</script>"<span>; </span><span>exit</span>(0<span>); }</span><span>else</span><span>{ </span><span>echo</span> "<script>alert('host right.');</script>"<span>; </span><span>echo</span> "<h1>Hello World!</h1>"<span>; }</span>