Re: Re: HTTP REFERER not set in Internet Explorer

[mike () sharecube com]

Hi Saqib,

If you want to track repeat customers, use cookies. If you want to track referers, use unique urls that contain a code 
that maps to refers in your data base.

One twist to cookies that I use is to store a public key of the user. They key is used to encode their password and 
send a digest. In this way, passwords are never sent (even over an SSL connection). I also never store passwords (only 
digests). 

If no cookie is available, I record the fact and encode the password using a general public key. I can then challenge 
the user.

Anyone with a bit of smarts can encrypt a password (just as they could randomly guess at a password), but they cannot 
steal passwords from the server (none there), or sniff using SSL sniff tools.

Mike