[?] Getting Refering Address [?]

[baden]

I'm sure I've got the concept behind Request.ServerVariables("HTTP_REFERER"), but I need some help.

fillform.html: located at

http://www.test.com/fillform.html

formprocessor.asp located at

http://www.receiver.com/formprocessor.asp

User fills out the form located at fillform.html, where the form action is "

http://www.receiver.com/formprocessor.asp".

Doing

callingURL = Request.ServerVariables("HTTP_REFERER")
Response.write "<br>caller: " & callingURL & "<br>"

at formprocessor.asp returns nothing.

Using

For Each obj In Request.ServerVariables
  Response.write obj & ": " & Request.ServerVariables(obj) & "<br>"
Next

I see:

LOCAL_ADDR: 69.44.152.113
REMOTE_ADDR: 24.66.94.141
REMOTE_HOST: 24.66.94.141

There is no HTTP_REFERER.

I want to authenticate the request from the referrer against a database value, so requests are only accepted from that particular server or file (

http://www.test.com/fillform.html).

Help.


Thanks.

 

[Sheco]

Most of the stuff that is normally found in an HTTP header is optional. If the browser decides not to send it then you just wont get it. Some people configure their browsers to do this because of "privacy" concerns... other people install software that "protects their privacy" by removing all but the required HTTP headers... some people are behind proxy servers that do this dastardly deed.

 

[DotNetGnat]

you can try this:

If instr(Request.ServerVariables("HTTP_REFERER"),"24.66.94"
) Then

'request can be accepted
else
'request denied
end if

-DNG

 

[baden]

Thanks DotNetGnat, BUT....

See the lines above:

callingURL = Request.ServerVariables("HTTP_REFERER")
Response.write "<br>caller: " & callingURL & "<br>"

callingURL is null... meaning Request.ServerVariables("HTTP_REFERER") is null.

When doing

For Each obj In Request.ServerVariables
  Response.write obj & ": " & Request.ServerVariables(obj) & "<br>"
Next

There is no HTTP_REFERER in the list! Why?

 

[ChrisHirst]

I would suggest that first off you try from a different machine as it looks to be something on the one you are using is blocking headers.
The one thing that cannot be blocked during a HTTP response are IPs which is why you see those returned.


Chris.

Indifference will be the downfall of mankind, but who cares?
Woo Hoo! the cobblers kids get new shoes.
People Counting Systems

So long, and thanks for all the fish.