Header Redirect Security

[wintallo]

Hey,

 

I have a simple question. Will this line of code pose as a security threat? The reason I ask this is because I know people can spoof their referrer.

 

header("Location: ".$_SERVER['HTTP_REFERER']);

 

Thanks!

[discomatt]

That's a bad way to return to last page viewed.

 

A better way is to set the current page as a session var at the bottom of all your scripts. That way, the variable will contain teh previous page the use was on until you redefine it to the current page