hi i am using tomcat/jboss as my server.

each time i open a page the url is shown on the address bar.

now i want my pages to identify that the urll has been directly typed or it comes from the server so that i can avoid direct access to a page. i have tried document.refferer but did not succeed

thanks for the help

sometimes document.refferer gives nothing .Its not a good check for ,from where current page comes or ,it is originally sent by the the page on your domain.
There are multiple ways.
1>Hidden fields ,that shows carries page-referer or pagecode.be careful about popup page,and ur encryption -decription technique.

2>Make your own level of authorization ,allow to access to different Modules.

3>You can use server variables at some extents,also avoid pagecode- to shown on url(using querystring).

4>Check session ,if session is null -->main login page.
well once your session is establised and user have access to module, as i think its not easy to track whether the page is generated from the server or user types directly the url of your domain.

Plz let me know if you have other alternatives



Cheers :)

vinod