Hi All, As I understand that cgi.http_referer created by the browser only when the user follows a link or submit a form to the current page. So sometimes it could be blank.
With this in mind we put this piece of code in our action page: <cfif attributes.method contains "Action"> <cfif listGetAt(cgi.HTTP_REFERER,2,"/") neq cgi.HTTP_HOST> <cflocation url="index.cfm" addtoken="no"> <cfabort> </cfif> </cfif> Also after an action page is called it relocated to another page so the action page shouldn't be bookmarked accidentally. But still sometimes we received an error message indicate that the cgi.http_referer is empty. This occurred even with IE5.0 For this error message we can check to see if the cgi.http_referer is empty first, but we do not want to throw the right person away by mistake. So the question is: Is there any other situation when the cgi.http_referer would not be get set? Any suggestions will be greatly appreciate! ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Get the mailserver that powers this list at http://www.coolfusion.com FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/ Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists