Must come from particular pages

[Anon]

I was wondering if someone could tell me how to make this code work with multiple pages. I want to be able to come from not just the login.asp page but also from Default.asp and/or Help.asp as well.

Any help would be greatly appreciated.

Thanks.

Code is below.

<script LANGUAGE="JavaScript">
<!-- Begin
var requiredfrom = "login.asp";

if (document.referrer.indexOf(requiredfrom) == -1) {
window.location=requiredfrom;
}
// End -->
</script>

[Anon]

Why are you doing this in JavaScript, and asking on a PHP message board?

To do this in PHP you'd just do this:

<?php

$from = $HTTP_SERVER_VARS["HTTP_REFERER"];

$valid_from = array("somepage", "someotherpage");

$valid = false;
for (i = 0; i <= length($valid_from); $i++) {
if ($from == $valid_from[$i]) {
$valid = true;
}
}

if (!$valid) {
header("Location: $from"); // kick them back without telling them why
}

//do rest of page
?>

You can do the translating of that to JavaScript if thats the way you want to go, but remember JavaScript is client side and if someone has there JavaScript turned off in there browser then the will see this page no matter where they came from.

[cordex]

The HTTP_REFERER variable, like the javascript alternative, cannot be counted on. To be certain, you could use some brand of session tracking. I don't like the built in sessions so I built my own. You might consider something similar.

-Ben