Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Programming > ASP .Net > ASP General > Only accept page entry based on allowed host header.

Reply
Thread Tools

Only accept page entry based on allowed host header.

 
 
Mario C
Guest
Posts: n/a
 
      07-16-2003
This sounds wierd... but i would love to know how to do this in asp.

Linkpoint central does this with their payment gateway as a securty
measure... you cannot post a sale request unless it comes from a
specific address, that you specify in their management console. (
which im pretty sure its checks the referer page.)

if anyone has any ideas this would be great.
 
Reply With Quote
 
 
 
 
wetchman
Guest
Posts: n/a
 
      07-16-2003
Also, some antivirus programs like Norton Internet Security will actually
change the server variable name to HTTP_WEFERRER because of some of their
security things. Weird, but frustrating.

/bw


"Ray at <%=sLocation%>" <(E-Mail Removed)7yasdf.com> wrote in
message news:e%(E-Mail Removed)...
> If Request.ServerVariables("HTTP_REFERER") <> YourRequiredFromPage Then
> Response.Write "You can't do that.
> Response.End
> End If
>
> You'll have to get a little more involved than that, but you probably are
> looking for the referer. Take a look here to see some problems with using
> the referer server var, though. http://www.aspfaq.com/2169
>
> Ray at home
>
> "Mario C" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) om...
> > This sounds wierd... but i would love to know how to do this in asp.
> >
> > Linkpoint central does this with their payment gateway as a securty
> > measure... you cannot post a sale request unless it comes from a
> > specific address, that you specify in their management console. (
> > which im pretty sure its checks the referer page.)
> >
> > if anyone has any ideas this would be great.

>
>



 
Reply With Quote
 
 
 
 
Ray at
Guest
Posts: n/a
 
      07-17-2003
WT*?

Ray at home

"wetchman" wrote:
> Also, some antivirus programs like Norton Internet Security will actually
> change the server variable name to HTTP_WEFERRER because of some of their
> security things. Weird, but frustrating.



 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Why defining a constant in a method is not allowed but usingself.class.const_set is allowed? IƱaki Baz Castillo Ruby 13 05-01-2011 06:09 PM
error: Only Content controls are allowed directly in a content page that contains Content controls. hazz ASP .Net 6 06-09-2010 01:54 PM
how to refer a control in the host page from a user control if the host page using masterpage Jerry Qu ASP .Net 1 02-20-2009 07:41 PM
Allowing entry of a Carriage Return during data entry Mike Owen ASP .Net Web Controls 3 07-27-2006 02:34 PM
Form field entry directs to diff URLs based on entry? AtomicBob HTML 14 05-02-2006 07:07 AM



Advertisments