Website security with headers NEED HELP QUICK!

[nicholaspaul]

I need to make sure that visitors to a webpage were directed from a certain other web page (ie., they didn't just type in the URL).

Can i do this with $_SERVER['HTTP_REFERER'] ? The logic I'm thinking is:

If $_SERVER['HTTP_REFERER'] is not www.payhere.com, then header ("Location: http://www.domain.com/error.html"); 

 

How might I go about this? My php knowledge is a bit ... limited. Any and all help appreciated!

 

Thanks.

[Third_Degree]

what's wrong with your logic?

[nicholaspaul]

I dont think anything is wrong with my logic. How would I code this (I know its going at the beginning of the download page) ?

[Third_Degree]

if ( $_SERVER['HTTP_REFERER'] != 'somepage' ) { die( header( "Location: whatever.html" ) ); }

[nicholaspaul]

Thanks mate - youre a life saver. I just didnt want to spend all day looking for a lost bracket or something!!!

Thanks again!

 

(I'll let you tomorrow how it works)