Re: reloading a page..
| From: | Beauford.2002 | Date: | Sun, 23 Mar 2003 22:34:31 +0000 |
| Subject: | Re: reloading a page.. | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-140784@lists.php.net to get a copy of this message | ||
The link in question is there by design and should be there, but below is
what I am talking about.
> Even better, if a user cannot be validated then you can redirect them back
to where they
> came from (referrer). That would effectively achive your goal by
> refreshing the original page no matter where they;re coming from.
This is what I have, but no matter what I do I can not get a message to
appear on the referring page saying you have no access to the other page,
and I have also read that 'HTTP_REFERER' is not very reliable....
if($userlevel != $neededlevel) {
include ($_SERVER['HTTP_REFERER']);
$message = $no_permission;
$exit;
}
...on referring page....
<? if ($message) { echo $message; } ?>
----- Original Message -----
From: "Leo Spalteholz" <leo@spalteholz.ca>
To: <php-general@lists.php.net>
Sent: Sunday, March 23, 2003 2:06 PM
Subject: Re: [PHP] reloading a page..
> On March 23, 2003 10:22 am, Beauford.2002 wrote:
> > One other problem is that I need to know the page the came from in
> > order to reload it. i.e. if they try to access a restricted page
> > from six.html I want to reload six.html - if they try from
> > eight.html then eight.html needs to be reloaded.
>
> Firstly, as David mentioned, if the user is not allowed to access the
> page then the link shouldn't be there in the first place. If there
> is no link then there is no need to refresh the page or generate an
> error or anything. If you really want to you can have the link but
> instead of an href to the page you would replace it with a Javascript
> alert saying "access denied".
> But thats beside the point because if they enter the restricted page
> into the address bar directly it also has to deny them access. You
> should write a script that checks the users credentials and then
> include it at the top of EVERY page. If the user can no be validated
> then an access denied message is displayed. Even better, if a user
> cannot be validated then you can redirect them back to where they
> came from (referrer). That would effectively achive your goal by
> refreshing the original page no matter where they;re coming from.
>
> Leo
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>