TYPO3 Core

When sending a formmail TYPO3 checks if the referer hostname is equal to the TYPO3_HOST_ONLY environment variable. You can switch this off completely by setting TYPO3_CONF_VARS['SYS']['doNotCheckReferer'].

I added an option to let TYPO3 accept specific other hosts as referer. I use this to send a mail through a portlet on another server which includes a part of a TYPO3 page with a form. Through this feature I don't have to deactivate the referer check totally.

To realize this, i patched tslib_fe.php.

To set the accepted hostnames, simply set up a comma separated list of them in localconf.php:

TYPO3_CONF_VARS['SYS']['trustedReferers'] = 'www.example1.org,www.example2.org';
(issue imported from #M1373)