How to redirect the refer page after loggin ?

[paitoon]

Well, actually im bad in this im not sure if i post the title correctly...

My problem is I make a site which people can comment the picture each other..
every comment will be sent to their email to lead them to see that comments page......but they have to login first......

My problem is howto do that ? for example i set like this

u have got a comment on your pic if u want to see it just loggin
www.mysite.com/see_img.php?id=10278

after they click on it they have to login first and i dont know how to do to make them go to that påage directly after they login.

Im so sorry if my language is not good enaugh
paitoon

[Atli]

Hi.

You could save the ID of the image, the one you with the see_image.php, to a session variable. Then it would be saved throughout the session and you could call it wherever you want.

[paitoon]

My problem is the first page after logg in is not see_img.php.....but it is home.php

so, I try to do like this--->if the session is logged in it no problem because after people click on the link they could go to see the comment on the see_img.php....but if they are not logged in then they have to go go to logg in first...i use header( "Location: login.php"); exit();

But after that i dont know how to take the variable to the login.php or u can say i dont even know the system....i tried to do what you gave me the direction but i maybe too stupid to understand what u saaid.....ohhhh......sadd....i dont want to give up..because this is the last problem i get now befire i invite people to my web site...i got stress with this for many days now...

:-/
Paitoon

[Atli]

Ok. Think of it this way.

When your users enter see_image.php you set a session variable containing the Image ID of the image they are viewing. Somewhat like this:

$_SESSION['lastImg'] = $_GET['id'];
 

When they are done with the user login, you check that variable.
If it is set, grab the value from it, unset() it and redirect your user the the see_img.php using the ID you grabbed from the session:
If it is not set, redirect them to home.php.

if(isset($_SESSION['lastImg'])) {
  $id = $_SESSION['lastImg'];
  unset($_SESSION['lastImg']);
  header("Location: see_img.php?id=$id");
}
else {
  header("Location: home.php");
}
 

You would also need to check if this session variable is set when you enter home.php and unset() it if it is, just so you wont get redirected to the last image you viewed when you log in from there.

if(isset($_SESSION['lastImg'])) {
  unset($_SESSION['lastImg']);
}
 

And remember to always put session_start() at the top of each page.

[kovik]

Security risks aside from saving an unfiltered GET variable, that is a good solution. A more permanent one would be to have some sort of central authorization that you use to handle that sort of thing. For example, maybe have a simple script like this:

[php]if (!$currentUser->isLoggedIn()) {
$_SESSION['lastPage'] = $_SERVER['REQUEST_URI'];
header('Location: http://domain.tld/login.php');
}[/php]

And include that script into every file that requires user authorization (*after* session_start(), of course). Then, login.php could use $_SESSION['lastPage'] for redirection.

Another thing you may want to add is another sort of central thing that destroys that session variable if you go anywhere but on login.php so that the user would always be directed to where they were expecting.

[paitoon]

You are very good....thank you so much i proved it .......:-)