You are viewing limited content. For full access, please sign in.

Question

Question

Disallow direct communication to WebLink unless accessed through external site

asked on February 23, 2018
Hi,
 
I have a client that has a web page that has links to specific documents within WebLink. They want to lock down WebLink such that it is only able to be accessed to view documents when a link is clicked from that other site, and that they wouldn't be able to access WebLink at all if the link isn't clicked from that other page.
 
For example, WebLink server is ServerWeb, and the external site is ExternalSite.
If User goes to ExternalSite and clicks the link for a document on ServerWeb, ServerWeb presents the file within WebLink.
If User goes directly to ServerWeb, they are not able to access it.
 
I don't think this is possible within WebLink itself, but has anyone else ever seen or done a setup such as this, or have any ideas as to how this could be accomplished?
 
Thanks,
Cody
0 0

Replies

replied on February 23, 2018

The "referer" header will tell you what page a user was at previously.  You would need to read that value, store it somewhere, and check its value at subsequent requests.  I don't have any suggestions on how to implement this, maybe there is an HTTP Module that provides this for IIS in a drop-in way.  One thing to be aware of is that the referer information is passed by the browser and is therefore not really trustworthy.

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.