Disguise the link

[madanthrax]

Hi all,

I have an html page in a password protected folder on an internet website 1. I want to make a hyperlink available to a file up/download page on website 2 on another server. This transfer needs to take with it some credentials to authenticate it with the receiving asp page which would be set up to only allow entry from users coming from the website 1 page.

Website 1 uses one of those "Web Content Management" applications where html static pages are generated and 'put' to the live site. External user access to protected pages is via IIS username and password.

I have full control of website 2. If Website 1 was asp then I could dream up something sneaky to hide the passed credentials in a long querystring with current date and time mixed in it or something. I just don't want the users copying the link and going to the website 2 page without coming via website 1.

Any ideas?

[sub]"Nothing is impossible until proven otherwise"[/sub]​

 

[Sheco]

You could use Request.ServerVariables("HTTP_REFERER") if security isn't critical. It would keep the honest people honest.

 

[madanthrax]

Thanks Sheco. Forgot about that.

[sub]"Nothing is impossible until proven otherwise"[/sub]​