|
|
Posted by Kimmo Laine on 09/19/05 13:29
"qwert" <qwert@eribus.ch> wrote in message
news:432e8e43_2@news.bluewin.ch...
> Neil Trigger schrieb:
>> Yes... almost right.
>>
>> When a user clicks on any page, I need to check firstly the permissions
>> of that page and then cross refernece it with thether they are logged in.
>> Then if they ae not logged in and the page requires them to be then they
>> get redirected.
>>
>> Once redirected, they decide to login and on the login page they have a
>> link saying "go back to where you were" or something similar, which takes
>> them back to the page that they were originally redirected away from.
>>
>> I have the session script in the top.php include which goes on every page
>> of the site. I also have in that script a way to disable it so that pages
>> like the login script and error pages do not get recognised and do not
>> interfere with the session being written.
>>
>> Still baffles me though.
>>
>
> ok, but why don't you just use $_SERVER['referer'] when you check the
> permissions and decide to rediredt the user to a loginpage ?
Referer is not provided by all browsers. Sometimes security settings prevent
the browser from sending the referer header to server. That is why referer
cannot be trusted, but instead the referring page needs to be saved to
sessiondata like OP is planning to do.
--
Welcome to Usenet! Please leave tolerance, understanding
and intelligence at the door. They aren't welcome here.
antaatulla.sikanautaa@gmail.com.NOSPAM.invalid
Navigation:
[Reply to this message]
|