Re: how can I ensure a PAGE2.php is opened only after viewing PAGE1.php AND is opened in HTTPS?

From: Thi Nguyen (thihn_at_uci.edu)
Date: 11/20/03 

Date: Wed, 19 Nov 2003 18:01:41 -0800

You could also look into the referer and see whether it came from
https://yourdomain.com/page1.php or not, etc etc

"Tom Thackrey" <use.signature@nospam.com> wrote in message
news:vuOub.32665$Hl4.15862@newssvr25.news.prodigy.com...
>
> On 19-Nov-2003, "NotGiven" <noname@nonegiven.net> wrote:
>
> > I have a web page where certain pages have to be opened in a certain
order
> > and should only be available when the user openes them in HTTPS.
> >
> > They are all forms and the form action sends you to the next https://
page
> > but you can also take the S out of https:// and it opens also. That's
> > what
> > I need to avoid as well as making certain they got to a certain page
FROM
> > a
> > certain page.
> >
> > When I try:
> > if (isset($_SERVER['HTTPS']!='on'))
> > it crashes and is not even listed on php.net as a valid variable.
>
> Either hide something in a field on the page that you check in the next
page
> (if your hidden field isn't in the $_POST array you know the user didn't
> come from that page) or use sessions.
>
> --
> Tom Thackrey
> www.creative-light.com
> tom (at) creative (dash) light (dot) com
> do NOT send email to jamesbutler@willglen.net (it's reserved for spammers)

Relevant Pages