Patent ID: 8584232

Claim:
A method comprising: storing web pages on a site, the web pages being classified, based on defined criteria, as entry pages that do not accept any input data included in received web page requests from user applications, or protected pages that are not entry pages, wherein the web pages are organized such that access to each of the protected pages is provided via an access path over one of the entry pages; receiving a first web page request from a user application to receive a first requested web page stored on the site, the first web page request including a referrer string indicative of a referring web page, and identification data; determining whether the first requested web page is one of the entry pages or one of the protected pages; in response to determining that the first requested web page is one of the entry pages, removing all input data from the first web page request to produce a stripped first web page request; in response to determining that the first requested web page is one of the protected pages, determining whether the user application is authorized to access the protected page based upon the identification data, and whether the referring web page is stored on the site based upon the referrer string; in response to determining that the user application is not authorized to access the protected page or that the referring web page is not stored on the site, removing all input data from the first web page request to produce the stripped first web page request; and transmitting one of the entry pages specified in the stripped first web page request to the user application.