http_referer empty? Firewalls?

[Guest]

Can one reliably use http_referer to track a user page selections as I
appear to be getting BLANK values?

I have read that company firewalls etc block this method....

Thanks
jason

[Andrew Urquhart]

Re: http_referer empty? Firewalls?

*jason@catamara nco.com* wrote:[color=blue]
> Can one reliably use http_referer to track a user page selections[/color]
[snip]

No, it's strictly optional and is easily spoofed.
--
Andrew Urquhart
- FAQ: www.aspfaq.com
- Contact me: http://andrewu.co.uk/contact/

[Guest]

Re: http_referer empty? Firewalls?

Thanks, are there any other viable alternatives?

- Jason

"Andrew Urquhart" <useWebsiteInSi gnatureToReply@ spam.invalid> wrote in
message news:OfSRc.1339 $Bo5.130@newsfe 4-gui.ntli.net...[color=blue]
> *jason@catamara nco.com* wrote:[color=green]
> > Can one reliably use http_referer to track a user page selections[/color]
> [snip]
>
> No, it's strictly optional and is easily spoofed.
> --
> Andrew Urquhart
> - FAQ: www.aspfaq.com
> - Contact me: http://andrewu.co.uk/contact/
>
>[/color]

[Aaron [SQL Server MVP]]

Re: http_referer empty? Firewalls?

> Thanks, are there any other viable alternatives?

Post the data from page to page. Use session variables. Use a session
identifier in the querystring and store the data in the database.

As for the problems with HTTP_REFERER, see http://www.aspfaq.com/2169

--

http://www.aspfaq.com/

(Reverse address to reply.)

[Andrew Urquhart]

Re: http_referer empty? Firewalls?

*jason@catamara nco.com* wrote:[color=blue]
> *Andrew Urquhart* wrote:[color=green]
>> *jason@catamara nco.com* wrote:[color=darkred]
>>> Can one reliably use http_referer to track a user page selections
>>> [snip][/color]
>>
>> No, it's strictly optional and is easily spoofed.[/color]
>
> Thanks, are there any other viable alternatives?[/color]

Ultimately the stateless nature of HTTP prevents this, but you can
attempt to do so via cookies, querystrings and form posts usually in
conjunction with some sort of database.
--
Andrew Urquhart
- FAQ: www.aspfaq.com
- Contact me: http://andrewu.co.uk/contact/
- This post is probably time-stamped +1 hour - blame my ISP (NTL)

[Andrew Urquhart]

Re: http_referer empty? Firewalls?

*Aaron [SQL Server MVP]* wrote:[color=blue]
> As for the problems with HTTP_REFERER, see http://www.aspfaq.com/2169[/color]

Possible additions for that FAQ entry:

"The situations where it doesn't work:"

10. If the user is using a Firewall or privacy filtering software
11. If the client allows referrers to be turned off (e.g. Opera,
Mozilla)

Perhaps there should also be a note on its reliability if it is present
because of ease of spoofing it?
--
Andrew Urquhart
- FAQ: http://www.aspfaq.com
- Contact me: http://andrewu.co.uk/contact/
- This post is probably time-stamped +1 hour - blame my ISP (NTL)

[Guest]

Re: http_referer empty? Firewalls?

Would one have the same problem with the URL and PATH parameters...ma ybe I
could somehow string the original URL together useing these...

"Andrew Urquhart" <useWebsiteInSi gnatureToReply@ spam.invalid> wrote in
message news:bKSRc.1014 $zT5.485@newsfe 6-gui.ntli.net...[color=blue]
> *Aaron [SQL Server MVP]* wrote:[color=green]
> > As for the problems with HTTP_REFERER, see http://www.aspfaq.com/2169[/color]
>
> Possible additions for that FAQ entry:
>
> "The situations where it doesn't work:"
>
> 10. If the user is using a Firewall or privacy filtering software
> 11. If the client allows referrers to be turned off (e.g. Opera,
> Mozilla)
>
> Perhaps there should also be a note on its reliability if it is present
> because of ease of spoofing it?
> --
> Andrew Urquhart
> - FAQ: http://www.aspfaq.com
> - Contact me: http://andrewu.co.uk/contact/
> - This post is probably time-stamped +1 hour - blame my ISP (NTL)
>
>[/color]

[Guest]

Re: http_referer empty? Firewalls?

Thanks

"Aaron [SQL Server MVP]" <ten.xoc@dnartr eb.noraa> wrote in message
news:uMdi%23Plf EHA.3928@TK2MSF TNGP11.phx.gbl. ..[color=blue][color=green]
> > Thanks, are there any other viable alternatives?[/color]
>
> Post the data from page to page. Use session variables. Use a session
> identifier in the querystring and store the data in the database.
>
> As for the problems with HTTP_REFERER, see http://www.aspfaq.com/2169
>
> --
> http://www.aspfaq.com/
> (Reverse address to reply.)
>
>[/color]

[Guest]

Re: http_referer empty? Firewalls?

Special Note: Browser Hawk Referrer works like a dream, so problem solved!

I am testing for both persistent and client side cookies - See checktype 3:

<%
set bh = Server.CreateOb ject("cyScape.b rowserObj")

Response.write CheckType
checkType = 3

if checkType = 3 then
bh.SetExtProper ties "cookie_both,re ferrer"
elseif checkType = 2 then
bh.SetExtProper ties "cookie_ses s"
elseif checkType = 1 then
bh.SetExtProper ties "cookie_per m"
else
response.write "<html>bad checkType specified</html>"
response.end
end if
bh.GetExtProper tiesEx
%>

I then successfully called the bh.Referrer property....

Great component that!

Thanks
Jason
<jason@catamara nco.com> wrote in message
news:OlScNElfEH A.1156@TK2MSFTN GP10.phx.gbl...[color=blue]
> Can one reliably use http_referer to track a user page selections as I
> appear to be getting BLANK values?
>
> I have read that company firewalls etc block this method....
>
> Thanks
> jason
>
>[/color]