Recently I made two pages. One was the login page that asks for username and password. If it is OK only then next opening page will be opened. That was working. Now I wanted to ensure that the second page will be displayed only throgh the login page. I use HTTP_REFERER in the second page and it was working. Now what happened when I reached the second page, I press enter at the address bar. At this time a browser is again requesting for this page. This time its without login page and still that page is displayed. When I did the same thing in Netsacape it behaved properly by showing my given message that you have to login first to reach this page. Is it an IE Bug?