deny direct access to url

jhouchin

I have a web page that I only want to be accessed through a link from another web page I have. I want to deny direct typing of the url in the address bar. Is there any way to do this. The issue isn't authentication, thats already been done. Is there a way to send hidden information when the link is clicked so the next web page knows how it is being accessed?

Please help, and thanks in advance!

Jeff

jim_keller

Jeff, you can try checking the variable $_SERVER['HTTP_REFERER'], but this can be forged. Maybe you can try setting a session cookie when the user goes to the page with the link on it, then check that cookie for some kind of valid information (an md5 hash of their IP and a common private passphrase, perhaps) when they get to your page.

-Jim Keller
http://www.centerfuse.net

jhouchin

$_SERVER['HTTP_REFERER'] was along the lines I was looking for. But for some reason my site didn't pass this information along. when clicking on the link from another site, I had it echo the result, and it worked fine, but when I clicked on the link from my site the echo came back blank. I then did an if statement to check if it returned a value or not, and it came back false. Is there any reason why my page isn't sending this info along?