Only accept page entry based on allowed host header.

[Mario C]

This sounds wierd... but i would love to know how to do this in asp.

Linkpoint central does this with their payment gateway as a securty
measure... you cannot post a sale request unless it comes from a
specific address, that you specify in their management console. (
which im pretty sure its checks the referer page.)

if anyone has any ideas this would be great.

[wetchman]

Also, some antivirus programs like Norton Internet Security will actually
change the server variable name to HTTP_WEFERRER because of some of their
security things. Weird, but frustrating.

/bw
"Ray at <%=sLocation%>" <ra*@ajf8jalskdfna.sefrhja7yasdf.com> wrote in
message news:e%****************@TK2MSFTNGP11.phx.gbl...

If Request.ServerVariables("HTTP_REFERER") <> YourRequiredFromPage Then
Response.Write "You can't do that.
Response.End
End If

You'll have to get a little more involved than that, but you probably are
looking for the referer. Take a look here to see some problems with using
the referer server var, though. http://www.aspfaq.com/2169

Ray at home

"Mario C" <ph***************@yahoo.com> wrote in message
news:c8**************************@posting.google.c om...

This sounds wierd... but i would love to know how to do this in asp.

Linkpoint central does this with their payment gateway as a securty
measure... you cannot post a sale request unless it comes from a
specific address, that you specify in their management console. (
which im pretty sure its checks the referer page.)

if anyone has any ideas this would be great.

[Ray at]

WT*?

Ray at home

"wetchman" wrote:

Also, some antivirus programs like Norton Internet Security will actually
change the server variable name to HTTP_WEFERRER because of some of their
security things. Weird, but frustrating.