CGI Variable/IE Problem

[malleykr]

Hello.

I am having a very strange problem. I have 2 CF servers I am using, one for development and another for test. I have a link in the following format to each of these servers:
<a href=&quot;full path to CF page&quot; target=&quot;_blank&quot;>Click Here</a>

When the page is accessed, the application.cfm does a check on the CGI.SERVER_NAME and CGI.HTTP_REFERER variables to see if the page is being accessed from an acceptable area (there is only one page outside my directory that is allowed to call this page).

The problem is that altho I can get to the development server from either Netscape or IE, the link to the test server only works in Netscape. When I use IE, the cfif statement I am using does not see that the HTTP_REFERER variable is acceptable, and redirects to a logon page instead of allowing me to access the page I want to see. I set up some code to print the CGI variables to the screen in test, and the HTTP_REFERER variable is not being set when I use IE.

Has anyone had a similar problem? Any suggestions on what may be the reason for this strange occurance?

Thanks!
Kristen

 

[malleykr]

Apparently, IE will pass the HTTP_REFERER in any of the following cases:
The calling page and the called page are both secure
The calling page and the called page are both unsecure
The calling page is unsecure and the called page is secure.

However, in my instance, a secured page was calling an unsecured page. This caused the HTTP_REFERER not to be passed, which was the source of my problem.

 

[GunJack]

Interesting quirk, thanks for posting what you found.

GJ