Re: Blocking the direct download of a file

Jon Anderson wrote:

Greg Donald wrote:

There will be legitimate requests that will fail since not all browsers send a referer.

How many browsers out there that support the Java plug-in will not support referrers? Besides, the simple solution to that problem is just check for a non-existant referrer. If the browser doesn't support it, then it works anyway.

It's not a question of support, it's a question of something stripping it out before the request hits your server. This could be the browser, or a proxy, or pretty much anything else the request goes through. The "solution", as you rightly point out, is to simply allow it if there is no referrer. -Stut