This question is similar to the one i asked here. But its related because I want to achieve the same effect. I want the users to be restricted to only accessing other pages on the site through the main page. The first page contains a frame for navigation and then a frame for content of the page they navigate to. I want it to be setup so that the only way they can access the content pages is by using this main page. So if the main page is http://intranet/index.html then they cannot get to http://intranet/other_page.html without using the link provided in index.html. Is this possible and if so what would the best technique be? I’m using apache to serve the site and I have php and javascript available.
Share
Check the Referer request header – it will thwart casual users with their browsers. It can be spoofed though – you won’t fool a determined attacker.
False positives are possible though. Sometimes Referer is not set.