如果用户直接在URL中输入页面名称，如何重定向页面

Question

I have to redirect page if the user entered page name in URL. I have two pages called as index.php and shop.php

In index.php page there is a link called <a href="shop.php?function=add">Click here</a> . If i clicked on link then page is redirecting on shop.php properly.

Now the issue is if any user directly entered shop.php on URL then the page should be redirected on index.php page. That means the user will not able to access directly shop.php page.

I am not talking about header('location')

Answer 1

I think, you should try something like:

if(isset($_GET['function']) && $_GET['function'] == 'add') {
    // Show page contents
}
else {
    header('location: index.php');
}

Answer 2

You should try adding a random string to a session

 <?php 
 session_start();
$random = bin2hex(random_bytes(32));
$_SESSION['random'] = $random;
 echo '<a href="shop.php?function=add&token='.$random.'">Click Here</a>';
?>

Then check by adding this to the top off shop.php

if(!isset($_GET['token']) || $_GET['token'] != $_SESSION['random']){
header('Location : index.php');
}

This way it will be impossible for the user to access the page directly

Answer 3

if(isset($_GET['function'])) {
    if($_GET['function'] == 'add'){
        // Show page if function is "add"
    }
    else {
      // "Function" is not "add", it can be anything else: "remove", "edit", etc.
    }
}
else {
    header('location: index.php');
    exit();
}

If you not want to use header('location: index.php'); you can use.

?>
<script type="text/javascript">
    window.location.href = 'index.php';
</script>
<?php

OR

$URL = 'index.php';
echo '<script type="text/javascript">document.location.href="' . $URL . '";</script>';
echo '<meta http-equiv="refresh" content="0; url=' . $URL . '">';

Answer 4

Finally, I found my solution. I don't know my code is in the right format or not but my issue got resolved.

I change the link from this

<a href="shop.php?function=add">Click here</a>
to
<a href="shop.php?function=add&p_id=1">Click here</a>

and add below code in shop.php

if ( !($_GET['function']='add' && $_GET['p_id'])){
    header("Location: index.php");// send to login page
   exit;
}

Please suggest me if anything wrong.