Re: What to use when HTTP_REFERER is not set?

>I need to put a small security feature in one of my page. >The page is open as a popup from another web site. By checking the referer I tought >I could block any other call to this page but the referer variable is often not set... >What else could I do? ( no ssl so far is available for this :( ) Encrypt the clients ip address and include it in the url string (As a get parameter) in the url of the popup window, and on the other machine receiving the browser request test if the encrypted ip address matches clients ip...... Arne