How to get the URL of the referrer page?

The referer header (and any other HTTP header) can easily be modified by a user. Browser plugins like Firefox's tamper data or interception proxies make it very simple to manipulate header values. You might want to reconsider using the referer header value for anything other than reporting purposes. Does the application set a cookie with a session ID, or is there some other way to differentiate users who have logged into the application from those that are accessing the pages directly without having logged in? If so, you might be better off using that as a key for access control.

 

 

If you do want to stick with the referer header, you would need to pick either the HTTP::respond command or the HTTP::redirect. You can't use both methods in the same event one after another. You could use HTTP::respond and within the response content include text which is displayed to the user and javascript which redirects them after x number of seconds to http://abc.def.com.

 

 

Also, the referer header will typically be set to the full URL of the referring page. So you might want to use 'contains' instead of 'ends_with'.

 

 

Aaron