需要帮忙。 我需要根据推荐人定向传入流量

Question

So here's the deal.

I have a public page, that I cannot restrict to members only, that I need to check the incoming referer URL, and route traffic if coming from the proper domain. All other traffic, to be routed to an off site landing page.

E Commerce sales promotion between 2 companies, I only want to allow those who are coming in from the approved url.

I would've tried to do this with robots.txt, but in this case I don't have access to that file (thanks to the CMS I'm using).

I am pretty much forced to do this with Java. Any help is very much appreciated.

Answer 1

Referer in on-page Javascript is a very insecure way of doing things - for a start it will be world-readable. If security is not a prime concern but you want something better than JS, I'd head to the web server and do it in .htaccess or the equivalent Question #10171698

Answer 2

From Java use String referer = request.getHeader("referer"); where request is an instance of type javax.servlet.http.HttpServletRequest .

As others have noted, spoofing the referer is trivial and shouldn't be your only form of security.