Be care using CGI variables. This method is extremely easy to hack. Albert. -----Mensaje original----- De: Craig Bowes [mailto:[EMAIL PROTECTED]] Enviado el: viernes, 18 de mayo de 2001 18:24 Para: CF-Talk Asunto: RE: Best way to limit access to a specific template from "only" previous template? You should be able to use the referrer, right? #cgi.http_referer# Something like this maybe: <CFIF cgi.http_referer does not contain "template1.cfm"> <H1>Unauthorized host detected! Access denied!</H1> <CFABORT SHOWERROR="You are not authorized to use this function!"> </CFIF> And yes, the word referer is spelled wrong in the variable: cgi.http_referer -Craig [EMAIL PROTECTED] -----Original Message----- From: Jerre Hale [mailto:[EMAIL PROTECTED]] Sent: Friday, May 18, 2001 10:59 AM To: CF-Talk Subject: Best way to limit access to a specific template from "only" previous template? What is the best way to limit access to a specific template? Template2 can only be accessed via template1. Disallowing user access to template2 simply by typing in the specific url for template2. I see where <CFABORT> can limit access to a ip addresses as exampled in the manual Advanced Application Development, page 520; <CFIF Left(CGI.RMOTE_ADDR, 11) NEQ "208.193.16."> <H1>Unauthorized host detected! Access denied!</H1> <CFABORT SHOWERROR="You are not authorized to use this function!"> </CFIF> Can I modify the code so that it can limit via the calling template? Thanks, Jerre ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Structure your ColdFusion code with Fusebox. Get the official book at http://www.fusionauthority.com/bkinfo.cfm Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

