> Does cgi.http_referer always work with all browsers? No.
> Do some firewalls prevent browsers passing on this variable? Yes. > Because if it's not provided my app will assume they have > no right to be here and kick them out. > > How else can I check that the user has come from a particular > place, without using cgi.http_referer? You can't, really. The HTTP protocol simply isn't designed for that. However, if you have control over both ends, the referring page and the target page, you can set a cookie or use web server authentication or something along those lines. Dave Watts, CTO, Fig Leaf Software http://www.figleaf.com/ voice: (202) 797-5496 fax: (202) 797-5444 ______________________________________________________________________ Your ad could be here. Monies from ads go to support these lists and provide more resources for the community. http://www.fusionauthority.com/ads.cfm FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/[email protected]/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

