I am in need of some way of limiting the direct access to a login page. Here's the scenario... my company has an internet application (we'll call it AppCo) and they are in partners with CompanyB who wants their clients to access this app. However, CompanyB doesn't want their users getting into AppCo directly from my site, so I've created them a specific login page for them. That login page must reside on my website. CompanyB will place a "LOGIN" option on their website forcing their users to remain "members" of their site if they wish to continue access to AppCo. When the users click on this link it OPENS a NEW WINDOW for the login. Now is the dilemma - how can I restrict their users from just typing in that link (or saving it in their favorites) without going through the CompanyB website? I've thought about setting a Session Variable and then checking it, but can I do that if the link on CompanyB's website opens a new window? The reason for the new window is that they want them to continue to be in the CompanyB website, but also be able to work in AppCo.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Sorry for the delay... vacation was calling, but now I'm back at it. I'm afraid that doesn't seem to work. I'm not sure if maybe CompanyB isn't sending a referer, but when I tried to use a response.write to see it, I got nothing! I wrote "REFERER=" & vurl (my parameter) and I only seen my hardcoded REFERER= as a result.
SO - any other suggestions since I don't see a referer at all? I'm writing asp pages using VBScript and JavaScript.
Okay, here's an idea for you. Have companyB make their button an actual form that submits to your login page. Now the only input besides submit (the login button that they click) will be a hidden value that is something called "companyB" or something like that. So on their site they put something like this:
<form action="yourLoginURLForCom
<input type="hidden" name="fromCompanyB" value="1" />
<input type="submit" name="submit" value="Login to AppCo." />
</form>
This will launch a new window containing the page you put in the action attribute of the form with two variables in the post object, fromCompanyB and submit. All you have to do is check to see if fromCompanyB is present, if it is, then you let them login and do their thing, otherwise you display your alternative error message or do whatever you need to do.
Business Accounts
Answer for Membership
by: ritetekPosted on 2008-02-28 at 00:40:15ID: 21002106
You mentioned Session, are you using some kind of server script like php? Because you could check the $_SERVER['HTTP_REFERER'] variable if so. You can see if it is set using the isset method and if it's not print some error message. You could check the url if it is set to see if it is from companyB. If you are using client side only you could use the document.referrer value for the same purpose.