Well, people don't actually come _from_ a URL, surely (unless you mean the HTTP_REFERRER, which is, in itself, data which is notoriously unreliable).
If you mean that you want to be able to prevent access to people based on where they are, by trying to identify the IP address of their machines, for instance, then that too is prone to problems such as deliberate (or indeed, incidental and unintentional) masquerading).
On the whole, wouldn't it b easier to put a password protction on your site and distribute the password to people you wanted to give legitimate access to? After all, it's the people, not the machines, who you want to block or allow, isn't it?
|