PHP Help

[Starwind237]

I'm want to know if their is a way for a php page to detect what page the person who came to it from and allow or disallow access because of that.

In other words I want a "login Page" that when sucessful login happens redirects to another page. But if someone was to go to that page directly (skiping the login page) it detects that and denies access.

Any help with this would be appreciated.

[second2none]

yes

PHP Code:

<?php
$ref = $_SERVER['HTTP_REFERER'];
if(!$ref=="http://www.google.com"){
    echo "Sorry, but you didn't come from the right page";
}
else {
    echo "You came from the right place.";
}
?>

although referers are easy to fake.

[Starwind237]

Thank You. +Rep

I'm trying to secure a proxy page. They have a tendency to stop working when you do. I think this will work though.

[Cataclysmic]

Wait a sec...
Can't TamperData change the referrer?

[Starwind237]

Originally Posted by Cataclysmic

Wait a sec...
Can't TamperData change the referrer?

The people I'm protecting it from won't be able to figure that out.

if anyone want's to try and breach the security I'll leave the web server on until tomorrow night.

http://starwind237.no-ip.info/ is "login"

Google -:- Unleash the Web is proxy

[second2none]

does your password run through a DB or is it just php script

[Starwind237]

Originally Posted by second2none

does your password run through a DB or is it just php script

Just a php script. I'm going to be pretty much the only one using it. I haven't got into doing databases yet. Thats my next the to learn.

[rcadble]

Not a good idea in general to do. After it logs in, create a session variable, isLogged. Set the value to true.

When working with PHP sessions, you need to have "session_start();" as your first line of code in the whole page.

Setting a Session Variable:
This goes in a conditional that is executed when you logged in successfully.

$_SESSION['isLogged'] = true;

In your second page, you can check to see if this session variable exists.

Checking the Sesson Variable:

if ($_SESSION['isLogged']==true) {
    //run script
} else {
    echo "You must be logged in to view this page!"; //if the session date is invalid
}

[Starwind237]

Thanks I like the way the sessions work better. The idiots at school won't every be able to get on my proxy. XD