> Does cgi.http_referer always work with all browsers?

No.

> Do some firewalls prevent browsers passing on this variable?

Yes.

> Because if it's not provided my app will assume they have 
> no right to be here and kick them out.
> 
> How else can I check that the user has come from a particular 
> place, without using cgi.http_referer?

You can't, really. The HTTP protocol simply isn't designed for that.
However, if you have control over both ends, the referring page and the
target page, you can set a cookie or use web server authentication or
something along those lines.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444
______________________________________________________________________
Your ad could be here. Monies from ads go to support these lists and provide more 
resources for the community. http://www.fusionauthority.com/ads.cfm
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/[email protected]/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to