Hi, We plan to use HTTP_REFERRER to prevent external links. My question is can a web server be easily spoofed. Is it possible to send a http request header containing the required HTTP_REFERRER as text without clicking on a link? Thanks in advance. Regards John