Post Method Privileges

[pseudosig]

is there a good way to set privileges for files that post data to a cgi, such that those files are the only ones allowed to post to the designated cgi file?

i know you could check the ENV{'HTTP_REFERER'} environmental variable to see which file requested the cgi, but is there another way, maybe for instance i could designate like in a .htaccess file or whatever?

i'm just curious...

Thanks in advance,
PseudoSig

 

[TrojanWarBlade]

Surely that's an Apache question, not a perl question.

Trojan.

 

[icrf]

Well, HTTP is stateless, so you've got no guarantee where the user came from when a new request is made, I don't think anything in Apache will help. Your only viable option is to attempt to maintain state yourself, by some kind of server-side session. How you track the user's movements depends on your specific situation, but it could be done in Perl, especially if that's what most of the server-side code is written in.

________________________________________
Andrew