The problem lies in the browser caching the page... anyway to get around that?
You really can't rely on http_referrer... Here's what I'm doing (in a nutshell). Caller page: ----------------- <cfset server.id = createUUID()> <script language="Javascritpt" src="myJavascript.cfm?id=#id#"> Javascript page: ----------------- <cfif compareNoCase(url.id, server.id) OR len(url.id) EQ 0> .. hacker <cfelse> <cfset server.id = ""> </cfif> javascript code here....... -Brad > -----Original Message----- > From: Philip Arnold [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 30, 2003 8:09 AM > To: CF-Talk > Subject: RE: Here's An Example: WAS [Hiding Javascript Source] > > > > Just wanted to change the subject so you wouldn't think it's > > another "you can't do it" message. > > > > http://www.becomenew.com/jsGuard/ > > If you set your "Check for newer versions of stored pages" to "Never", > then you can view it > > It's stored in cache, so it won't try to re-get the page > > Nice idea though > > Although you could always do something incredibly similar just using > CGI.HTTP_REFERER rather than putting the UUID on the URL > > > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Signup for the Fusion Authority news alert and keep up with the latest news in ColdFusion and related topics. http://www.fusionauthority.com/signup.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

