In the Hypertext Transfer Protocol (HTTP), HTTP header fields contain the operating parameters of an HTTP request or response. With the request or response line (first line of message), they form the message header.

learn more… | top users | synonyms

1
vote
2answers
323 views

“Cannot modify header information” error in my PHP/WordPress site

I edited the header.php and functions.php files in my WordPress site to add Google Analytics tracking code. Now, when I try to login to my admin area, the following warning appears and I am unable to ...
1
vote
2answers
198 views

Google Analytics when 404 handler is used as 'mod_rewrite'?

I'm consulting on a web site which in order to provide clean URL's uses the 404 handler to catch what would otherwise be a 404 and serve the correct content. In case that's not clear the 404 handler ...
5
votes
2answers
46 views

What headers/META headers should I be using for an infinite link system like a calendar?

I have a web calendar, all my own work. It works fine. But I see in the logs a bunch of search indexers go round and round and round trying to chase every link. It could go forward to the year 3000 ...
2
votes
2answers
286 views

Using Pragma header on HTTP 1.1

would like know your opinion about using Pragma header when script is called in HTTP version 1.1 I don't know is good to return both Pragma and Cache-Control or rather return only Cache-Control ...
2
votes
1answer
122 views

Caching preventing users seeing site updates

I'm experiencing a caching issue I can't explain. This is happening across browsers, IPs and ISPs. If a user force-refreshes, they see the new content. If they then refresh or return to the page, the ...
2
votes
2answers
82 views

Verifying that a user comes from a 'partner' site?

We're building a Drupal module that is going to be given to trusted 'corporate partners'. When a user clicks on a link, he should be redirected to our site as if he's a logged in user. How should I ...
1
vote
2answers
390 views

Temporary website redirect: 3xx or php/meta?

I run a (small) news website which has also a forum in a subfolder of the root. I'm planning to give the site a facelift and a code restructuration, so I wanted to put some redirect on the home page ...
1
vote
2answers
1k views

Lots of HTTP HEAD requests originating from porn sites

The access log on my web server has a ton of HTTP HEAD requests coming from porn sites. What are HEAD requests and are they doing something bad with my site? Here is an excerpt from my log: (valid ...
2
votes
1answer
498 views

Problem with Expires/Cache-Control Headers

I'm using Apache 2.2.16. I've got the following HTML file in my htdocs folder: <html> <link media="screen" type="text/css" href="/css/test.css" rel="stylesheet" /> ...
7
votes
3answers
1k views

Important fields in HTTP header from security perspective

What are the Important fields in HTTP header from security perspective? I tried to google it but unable to find. Can anybody provide me a link to read about it? Thanks in advance.
1
vote
1answer
768 views

Enforcing a specific order for cookie headers

We have an application that cares about the order of cookie headers. It shouldn't, since this isn't mandated by the standards and indeed we're getting the headers in various different orders So we ...
4
votes
2answers
172 views

HTTP response for deleted or disabled items on ecommerce store

What HTTP response should you send when an item/category on your ecommerce site has been disabled or deleted? 410 looks correct for deleted products but not sure about something that has been disabled ...
8
votes
2answers
3k views

When to use and not to use ETags

I was just looking at our site on WebPageTest.org and one of their recommendations for speeding up a website is: ETag headers should generally not be used unless you have an explicit reason to ...
3
votes
1answer
1k views

What should my expires, cache-control, and pragma HTTP request header fields be set to?

I have a website in which I update the content approximately once monthly. When I check the HTTP request header fields, I get the following output: Expires: Thu, 19 Nov 1981 08:52:00 GMT ...
2
votes
2answers
98 views

Why does the website heading on pubvantage.com display arbitrary text when it is listed in google search results?

the website www.pubvantage.com has a permanent redirect to http://exchange.contextweb.com/sellingdesk/pubvantage/. The problem is, when a user enters the query +"pubvantage" in google, the site ...
11
votes
2answers
2k views

Considerations of the HTTP Content-MD5 Header

We are debating whether to use the Content-MD5 header. Pros: The CMS allows us to easily include it with minimal overhead (cached responses in 80%+ of the cases). It would add another layer of ...
8
votes
2answers
305 views

Does the 'Server' header serve any purpose?

For example, when I dump the response header for my server I get: Server: Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.5 with Suhosin-Patch mod_ssl/2.2.11 OpenSSL/0.9.8g Is this used for anything? Is ...
5
votes
2answers
89 views

Browser privacy improvement implications for websites

On https://panopticlick.eff.org/ EFF let you test the number of uniquely identifying bits that the browser gives a website. Among these are HTTP header fields such as User-Agent, Accept, ...