title: Deny direct URL access to action method
body: <p>I'm trying to find a way to deny any direct access to my action methods. Basically what I want my users to click on links to navigate instead of typing the URL directly into the address bar in their browsers.</p>
  
  <p>Now I know this can be done by checking the urlreferrer in the request object but this is kind of unreliable and weak because the urlreferrer can easily be modified and some of the security suites actually remove it from the request.</p>
  
  <p>So does any of you know of a way to do this in asp.net mvc3?</p>