Only accept page entry based on allowed host header.

Discussion in 'ASP General' started by Mario C, Jul 16, 2003.

  1. Mario C

    Mario C Guest

    This sounds wierd... but i would love to know how to do this in asp.

    Linkpoint central does this with their payment gateway as a securty
    measure... you cannot post a sale request unless it comes from a
    specific address, that you specify in their management console. (
    which im pretty sure its checks the referer page.)

    if anyone has any ideas this would be great.
    Mario C, Jul 16, 2003
    #1
    1. Advertising

  2. Mario C

    wetchman Guest

    Also, some antivirus programs like Norton Internet Security will actually
    change the server variable name to HTTP_WEFERRER because of some of their
    security things. Weird, but frustrating.

    /bw


    "Ray at <%=sLocation%>" <7yasdf.com> wrote in
    message news:e%...
    > If Request.ServerVariables("HTTP_REFERER") <> YourRequiredFromPage Then
    > Response.Write "You can't do that.
    > Response.End
    > End If
    >
    > You'll have to get a little more involved than that, but you probably are
    > looking for the referer. Take a look here to see some problems with using
    > the referer server var, though. http://www.aspfaq.com/2169
    >
    > Ray at home
    >
    > "Mario C" <> wrote in message
    > news:...
    > > This sounds wierd... but i would love to know how to do this in asp.
    > >
    > > Linkpoint central does this with their payment gateway as a securty
    > > measure... you cannot post a sale request unless it comes from a
    > > specific address, that you specify in their management console. (
    > > which im pretty sure its checks the referer page.)
    > >
    > > if anyone has any ideas this would be great.

    >
    >
    wetchman, Jul 16, 2003
    #2
    1. Advertising

  3. Mario C

    Ray at Guest

    WT*?

    Ray at home

    "wetchman" wrote:
    > Also, some antivirus programs like Norton Internet Security will actually
    > change the server variable name to HTTP_WEFERRER because of some of their
    > security things. Weird, but frustrating.
    Ray at, Jul 17, 2003
    #3
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. hazz
    Replies:
    6
    Views:
    49,400
    SkyUCHC
    Jun 9, 2010
  2. AtomicBob
    Replies:
    14
    Views:
    857
    Toby Inkster
    May 2, 2006
  3. mlt
    Replies:
    2
    Views:
    813
    Jean-Marc Bourguet
    Jan 31, 2009
  4. Jerry Qu
    Replies:
    1
    Views:
    445
    lee atkinson
    Feb 20, 2009
  5. Iñaki Baz Castillo
    Replies:
    13
    Views:
    478
    Iñaki Baz Castillo
    May 1, 2011
Loading...

Share This Page