Forum Discussion
insomniak_11745
Nimbostratus
NimbostratusRestrict Access via HTTP referer
I'm attempting to restrict access to an application via HTTP REFERER. Using the example given by the dev team, I'm using something that looks like this:
when HTTP_REQUEST {
switch -glob [HTTP::...
Kevin_Stewart
Employee
EmployeeIt really depends on your overall requirement. Making sure that a user who accesses your site is coming from another site can be easy and insecure (Referer header), or very complex (auth tokens, auth protocols, etc.) and generally requires some coordination between the sites. Putting the Referer in the URI would make it easier to spoof, and adding an md5 hash doesn't really provide any security.
