Well you may be right for some techie people but I just take the lazy option most of the time. I would've needed to check the syntax for the META tag coz I rarely use client side redirects and couldn't remember it, but I just wrote the JavaScript out on the fly so to speak so it was easier for lazy k@s like me to do it that way.
If I wanted to be a clever dick I would've done something like this.
<cfoutput><cfset intruder='#REMOTE_ADDR#'></cfoutput>
<cfmail to="me@hotmail.com" from="k@avarte.com" subject="IP Tracker" server="mail.atlinecorp.com">
Alert: attempt to access protected directory from:
IP = #intruder#
</cfmail>
<cflocation url="http://www.gohere.com" addtoken="No">
Then the redirect would've taken place serverside, saved a couple of trips to the server, and the visitor would've gotten to the right page immediately. Also I would get mail identifying the intruders IP addy.
ha ha. Pretentious, Moi?
However, Alan's solution is the easiest and if I didn't have my head up my ass half the time I would've remembered it.