Well, I thought I understood this, but I have found out otherwise. I understand HTTP_REFERER and know how it works,EXCEPT in this case.<BR><BR>I have a page that just basically has an HTML link to page2.asp<BR><BR>Page2.asp has a response.redirect to page3.asp. <BR>On page3.asp, it has a reqest.servervariables(HTTP_REFERER)...<BR>So, I would think on page 3, it would show page 2 as the referer. But, it show PAGE1.asp as the referer. Why is that??<BR><BR>Please help as this is very critical in a security issue on my site. Thanks!