blocking direct url links

Anon

Hi,
Supose I have the site www.domain.com and what I want is that in every page he checks if the user has entered the website throught www.domain.com

like this:

http://www.domain.com/page1.php if someone try this address without going first to www.domain.com the page1.php was redirected to another page (let's say a page error like error.php, it doesn't matter).

I made something like this work you go to www.domain.com click on the link to page1.php and it goes but if you go directly to page1.php like said before it redirected to a page error, the problem is that if you follow the links than on the page1.php you have a link to page2.php and when you click that link it will not work cuz the referer was www.domain.com/page1.php instead of just being www.domain.com

what I exactly want is that the referer for every page to be www.domain.com or http://www.domain.com with or without a trailing slash but in a way that works clickn on every link in the page and not just on the frist link in the index file.

Please help me and sorry for my bad english.

ziah75

Can you use a session variable to keep track of this?

register a session variable $has_visited_index and set it to TRUE on the index-page (www.domain.com/whateverpageisloadedbydefault.php)

Then on all other pages you check the session variable,
if(!$has_visited_index) //has not been on index
{
redirect_to_index_page();
}

I don't know if this is ugly... =)

/Anders

Anon

Im not sure if this is a good idea but jus give it a try:

Im guessin u check the referer on each page and if it is not www.domain.com u redirect them to the errorpage.php. YOu can try a ereg() function:

if (ereg('domain.com',$_SERVER['HTTP_REFERER'])) {
// Visitor came from your domain

} else {
//Visitor didnt come from your domain.
//redirect them to errorpage.php
}

Anon

i don't know how to use sessions

ziah75

This is an example script I downloaded some time ago, should give you an idea of the things. Please note that you MUST call session_start(); before sending any headers or html from the page. Otherwise it won't work, many have tried and failed... ;-)
Things might get a bit more complicated if your server is configured with register globals set to false, but don't worry bout that for the moment. =)
Hope this helps!

/Anders

page 1

<?php
session_start();
session_register("chars");
session_register("session_user_id");

session_register("logged_in_user_id");

$logged_in_user_id = 4;
$temp = 1;

$chars = array();
$chars[0] = "a";
$chars[1] = "b";
$chars[2] = "c";

$session_user_id = 5;

page 2

<?php
session_start();
?>

<head>
<title></title>
</head>
<body>
<?
echo "char #1 = $chars[0]<br>";
echo "char #2 = $chars[1]<br>";
echo "char #3 = $chars[2]<br>";

if ($session_user_id){

    echo "Logged in user id: $logged_in_user_id<br>";

}else{

    echo "No user logged in";

}

?>
</body>