As I discovered, using http_referer is a bad idea, as many things stop it
from being sent. Firewalls, anti-virus, browser plugins, all kinds of
things.

Russ
 

-----Original Message-----
From: Ali Awan [mailto:[EMAIL PROTECTED] 
Sent: 31 October 2005 23:27
To: CF-Talk
Subject: Re: Problems with sessions in CF 5

Sorry for the double-post.

However, there is something even more strange.

 

I'm checking for the http_referer before I set session variables.  Now in
this rare instance, the http_referer does not exist.  Does anybody know how
this could happen?

 

The user gets to the page from a form submit, and on my development box in
all tests that I run, the http_referer always exists.  There's no way a user
can navigate to that page without a submit, I already block users from
navigating to it directly.

 

Another curious thing is that there are a couple of cgi variables on the
page when it errors out which are:

http_~~~~~~~  and the value of that is a huge string of tildes like so:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

 

Again if anyone has any insight on such an issue I would be extremely
grateful.

 

Thanks,

Ali





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Discover CFTicket - The leading ColdFusion Help Desk and Trouble 
Ticket application

http://www.houseoffusion.com/banners/view.cfm?bannerid=48

Message: http://www.houseoffusion.com/lists.cfm/link=i:4:222877
Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4
Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
Donations & Support: http://www.houseoffusion.com/tiny.cfm/54

Reply via email to