I've got a lengthy form being submitted via POST to a php script (lets call it 'process-form.php'. The script then processes the data and, based on the data, should redirect to a different page via:
if (some-condition == some other condition)
{
header("Location:/some-page.php");
exit();
}
I've got all sort of protections in place on process-form.php to prevent direct access (redirect if request is not a POST, check for unique ID through $_SESSION). However, the script still shows up in the web browser history.
I was wondering if there was a way to even prevent this? Some modification of the 'header();' function?
Any ideas greatly appreciated. Thanks!