<i><b>Originally posted by : Mike O (m.oldroyd@virgin.net)</b></i><br />Further investigating my earlier post on submit buttons v hyperlinks, I built a sample of the problem on http://www.ideasmadework.com/Tracking/HRDemo.htm and discovered it is "Response.Redirect" from .asp pages that causes the problem.<br /><br />Is there any way to identify the URL of the calling .asp page ?<br /><br />Just as a matter of interest, I built another page "Hacker.asp" using "Reponse.Redirect" to "FromPage". By typing this URL on the address line "FromPage" can be made to accept a different querystring, but HTTP_REFERER is empty.<br /><br />Is HTTP_REFERER always empty when a page is called from the Address line ? And is testing for HTTP_REFERER being empty the correct way to prevent pages being called from the Address line ?<br /><br />And finally, when "FromPage" (which has sets no QuerySting) links to the next page, HTTP_REFERER on the next page includes the QueryString set up by the "Redirect"/"Hacker". What is happening here ?<br /><br />Thanks for your help. <br /><br />