Referring page?

[acctman]

Hi I have a php coded page (upload.php) setup that I only want users to access it, if they're coming from page start.php. How would I code that in?

[revraz]

You can use REFERER or set a session in start.php and read it on upload.php.

[marcus]

if($_SERVER['HTTP_REFERRER'] == "/start.php"){
echo "HELLO";
}

[PFMaBiSmAd]

Use the session suggestion.

 

All of the common web proxy scripts set 'HTTP_REFERER' to be the same as the url being requested, so any request to your page through a proxy will look like it is from someone already on your site. There is no guarantee that 'HTTP_REFERER' will contain anything or that it will accurately show that someone reached one of your pages from another one.

[acctman]

Use the session suggestion.

 

All of the common web proxy scripts set 'HTTP_REFERER' to be the same as the url being requested, so any request to your page through a proxy will look like it is from someone already on your site. There is no guarantee that 'HTTP_REFERER' will contain anything or that it will accurately show that someone reached one of your pages from another one.

 

is there an example of how the set session method should be coded.

[revraz]

In start.php set a session, in upload.php read if that session is set, if not, redirect them away.

[acctman]

In start.php set a session, in upload.php read if that session is set, if not, redirect them away.

 

uhh that didnt help much... i know that much. was asking for an example code.

[aschk]

<?php

session_start();
$_SESSION['location'] = __FILE__;

?>

 

then

<?php

session_start();
if($_SESSION['location']){
  echo $_SESSION['location'];
}

?>

[revraz]

If you knew that much, it wouldn't take but a search on Sessions to see how to use it.

 

In start.php set a session, in upload.php read if that session is set, if not, redirect them away.

 

uhh that didnt help much... i know that much. was asking for an example code.

[acctman]

hmm i put the following below in the reg_gender.php page (1st page)

 

<?php

session_start();
$_SESSION['location'] = __FILE__;

?>

 

and then in the image imgupload.php page (2nd page) i put the following below.

 

<?php

session_start();
if($_SESSION['location']){
  echo $_SESSION['location'];
}

?>

 

but i was still able to access the imgupload.php page but typing in the URL and not having to go to the reg_gender.php page first.