A: All client request header fields are accessible through GetServerVariable(): value for lpszVariableName should be header's name prefixed by "HTTP_", i.e. to get "Cookie: " value pass "HTTP_COOKIE".
This article by Itay Weinberger describes how to use an ISAPI filter to prevent unauthorized access to your JavaScript or VBScript files. [Read This Article][Top]