[Xitami] referer field

[Ewen McNeill]

In message <3B564054.30802@freesbee.fr>, Francis Turner writes:
>I recently visited a website where they cunningly used the referer field 
>and redirection of it was not present/not suitable to  provide a certain 
>amount of security within the site without SSL or any other security 
>scehme. This seemed really cool.

It's fairly weak "security".  Anyone can set the referer field to
anything they want (or not set it) when making a request.  Also some
firewalls and web proxies remove the referer field, which could make it
impossible for some visitors to reach some parts of your website.  In
short: be careful what you apply this technique to.

>Is there a way to do the same thing in Xitami?
>What you want to do is only display certain pages if HTTP_REFERER is set 
>to an appropriate value otherwise do a redirect to the login page.

As you note, you can do this with CGIs.  You can also do it with Filters
AFAIK, as Xitami treats them basically like filters when it comes to
processing things.  And of course you can do it with LRWPs. 

But you can't do it just with plain HTML files at present.

Ewen

-- 
Ewen McNeill, Technical Consultant, iMatix Corporation  www.imatix.com