cgi.http_referer problem

[dijana1081]

I am using this code for some web security :
<cfif NOT len(cgi.http_referer)
OR NOT findnocase(cgi.http_host,cgi.http_referer)>
<h3>Post action aborted!</h3>
<br />
<p>Post from foreign host detected</p>
<cfabort>
</cfif>

The problem that I am having isn't the code it is that one users
cgi.http_referer is always blank even when it shouldn't be. I know that she is
refering from a page from the application but when we dump the variable it's
always blank. What could be the problem. Is it her browser maybe?

[desprato]

It is not reliable to use http referer. Some browsers do not send it. Some
firewalls (i've seen norton do it) block it. Its best to use a session variable
or cookie to see if a user has already been on your site.

[RandNotAyn]

The solution for me was realizing that my referring file was local, on my drive, not from a server. Used this.

<cfoutput>
<cfdump var="#cgi#">

#cgi.HTTP_REFERER#

</cfoutput>