note 31948 added to function.header

If you use header("Location: http://somesite.com"); to redirect a user, be sure you put an exit; command directly afterwards. This is especially important if you are making certain that only authenticated users have access to a particular page. Some browsers (and tools, like curl) do not recognize the Location header redirect and will still display whatever the script returned after blowing right through the redirect. Of course, stopping the script from executing for unauthenticated users is a good idea anyway, since it provide a multitude of opportunities for security holes. -- http://www.php.net/manual/en/function.header.php http://master.php.net/manage/user-notes.php?action=edit+31948 http://master.php.net/manage/user-notes.php?action=delete+31948 http://master.php.net/manage/user-notes.php?action=reject+31948