Help with javascript redirects and maintaining headers

[m_tt]

Here is my problem...

I have a site that authenticates based on HTTP_REFERER.

One of our clients is using a javascript select menu to access our site. Which he uses the code

<select onChange="window.open(this.options[this.selectedIndex].value,'_blank')">

This code will not maintain headers and will not return the HTTP_REFERER. I have also tried keeping it in the same browser window (_top)

I have also tried to use location.href using this code

<select onChange="location.href='' + this.options[this.selectedIndex].value + ''">

Still.. the same problem, no headers.

Does anyone have a work around for this? Any ideas at all?

I appreciate any input you can give 🙂

[devinemke]

from the manual (http://www.php.net/manual/en/reserved.variables.php#reserved.variables.server)

'HTTP_REFERER'

The address of the page (if any) which referred the user agent to the current page. This is set by the user agent. Not all user agents will set this, and some provide the ability to modify HTTP_REFERER as a feature. In short, it cannot really be trusted.

[m_tt]

I am not concerned with what the referer is, spoofed or not, I just want it to return one but for some reason javascript redirects do not maintain the headers. 🙂