Printable View
I want to be able to check whether or not a user has certain permissions to be on that page. But this code is included after I've already done some echo statements. I use the following code to redirect the browser on an error,
header("location:error.php");
exit;
If a file is submitted in the header function is used it refuses to recognize the variables and thus goes to the wrong page. Is it possible to pass POST variables on as if a form was submitted, using header()?
However, up until PHP 4.4.2 / PHP 5.1.2 it was prone to injection attacks. to prevent from rewriting a lot of your code, I would borrow an idea from Joomla... instead of using header() directly to redirect, run a function instead. then you just runt he function with the URL as a parameter.. If you used a variable within the parameter and your user could set that variable to include a new line character, he could add in any other header at all.
The HyperText Transfer Protocol (HTTP) is the language that Web servers and Web clients use to talk to each other over the Internet. PHP's header() can be used to send raw, arbitrary HTTP headers. The main thing to rememeber with the header function is that it must be the first thing that sends output in you script. If it is not, you will receive the "headers already sent" error. The output can include error messages or simply a blank line before your initial <?php statement.
If a file is submitted in the header function is used it refuses to recognize the variables and thus goes to the wrong page. One of the many handy uses for this is if you have a site and you wish to track "click outs". You create an link on your site to an internal page, and then use the redirect to forward the user on the external site by either passing the new site in the URL or by passing a reference to a database which store the site addresses. I have echoed these variables before and commented out the header function and they are fine. As a work around Ive had to code a function that redirects using javascript.