Posted by Charles Sweeney on 10/22/65 11:23

Justin Koivisto wrote

> However, using HTTP_REFERER
> isn't such a good idea. Many popular firewall programs and proxy servers
> strip the referrer string from all web requests...

(HTTP_REFERER in general). How's about instead of using HTTP_REFERER, one
creates a session variable in the referring page, then checks for it in the
resultant page?

--
Charles Sweeney
http://CharlesSweeney.com

[Back to original message]