adam291086 Posted January 22, 2009 Share Posted January 22, 2009 Someone is able to hack my site. I am using session_start(); // is the one accessing this page logged in or not? if (!isset ($_SESSION['username'])) { // not logged in, move to login page echo "<meta http-equiv=\"refresh\" content=\"0;url=http://www.admin.bcyorkshire.co.uk\">"; } to stop people getting in. I i never stopped google from referencing the pages and they are able to get in by stopping the refresh. How can i secure the pages further? Link to comment https://forums.phpfreaks.com/topic/141912-php-secuirty/ Share on other sites More sharing options...
RussellReal Posted January 22, 2009 Share Posted January 22, 2009 use die instead of echo or ofcourse use header("Location: [ADDRESS]"); Link to comment https://forums.phpfreaks.com/topic/141912-php-secuirty/#findComment-743067 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.