Oh. The thing that's validating it is Apache via a ``SetEnvIf Referer'' and an ``Allow from env=''. So I need the browser to actually send the Referer: header.
_________________________
Bitt Faulk