back to previous page after login..

[liyenn]

Dear All,

My program works like this...

when user click on login button in my index.php, login.php will be shown and user requires to enter user name and password.

So when user login successfully, he will be brought back to the previous page (eg index.php in this case, it might be blog.php or other depends from where the user click the login button.)

i know there is a way using this:

header($url);
$link = $_SERVER['HTTP_REFERER'];
header($link);

but this is not work for me as when user submit the login form, it actually process in the same login.php form. $_SERVER['HTTP_REFERER'] will be override to login.php..

how can i get the user back to the page before he go into login form?

thank you!

[xmitchx]

Set a new hidden field in your login page with the value being the page to send the user back to. In the simplest case this would be:

<input type="hidden" name="return" value="<?=$_SERVER['HTTP_REFERER']?>" />

But this could be fairly insecure because it can return the user off-domain so you may want to check that out. Then on the next page just do:

header('Location: ' . $_POST['return']);

[liyenn]

Set a new hidden field in your login page with the value being the page to send the user back to. In the simplest case this would be:

<input type="hidden" name="return" value="<?=$_SERVER['HTTP_REFERER']?>" />

But this could be fairly insecure because it can return the user off-domain so you may want to check that out. Then on the next page just do:

header('Location: ' . $_POST['return']);

but then when user submit the login form, $_SERVER['HTTP_REFERER'] will be override, is it?

[liyenn]

hmmm.... is it possible to have a back 2 pages function for this?

[xmitchx]

but then when user submit the login form, $_SERVER['HTTP_REFERER'] will be override, is it?

No... the $_SERVER['HTTP_REFERER'] won't even affect your $_POST['return'] variable. You set the hidden variable on the previous page:

<input type="hidden" name="return" value="<?=$_SERVER['HTTP_REFERER']?>" />

This will be changed to something like this:

<input type="hidden" name="return" value="/previous_page.php" />

Since PHP will put the value of the variable in there. Then on the next page $_POST['return'] will be "/previous_page.php." It doesn't affect the server variable at all.

[liyenn]

xmitchx,

thanks for your reply again...
maybe i did something wrong in my last try just now..
i'll try out your suggestion again..

thanks ya!