Redirect not linking properly.

Question

I've set up a simple log in form that leads to an off site
FTP area for
this site's clients -- I finally got the code working
properly. After it
was all tested, he decided to change the redirect
address...he removed
the password permissions on the FTP site. However, once I
changed the
redirect address within the php code, it no longer works. It
worked fine
with the *other* address. Any ideas why? I can browse to the
address
just fine, although when I do, it adds "?view=web" to the end
of the url
(without the quotes).
Here's the code (again)
<?php
$error = FALSE;
if (isset($_POST['client_password']) &&
isset($_POST['client_name'])) {
if (($_POST['client_password'] == 'blah') &&
($_POST['client_name']
== 'blahblah')) {
header("Location=
http://idisk.mac.com/companyname-Public");
exit();
else {
$error = "<h2>Incorrect
username/password.<br>Please try
again.</h2>";
?>
Thank you -

Answer 1

Thank you, Micha --
They *could* go there to the url, really ... it's not a
special-secret
kind of thing. It's just for clients to view files that are
too large to
email. They just didn't want a link to go straight to that
site -- so we
did a minor work around.
And yep...I see the difference.
How come it's so easy to see it here, and not when I've been
staring at
it for an hour? :)
Thanks!
Michael Fesser wrote:
> .oO(Virginia Carter)
>
>> I've set up a simple log in form that leads to an
off site FTP area for
>> this site's clients -- I finally got the code
working properly. After it
>> was all tested, he decided to change the redirect
address...he removed
>> the password permissions on the FTP site. However,
once I changed the
>> redirect address within the php code, it no longer
works. It worked fine
>> with the *other* address. Any ideas why? I can
browse to the address
>> just fine, although when I do, it adds "?view=web"
to the end of the url
>> (without the quotes).
>>
>> Here's the code (again)
>>
>> <?php
>>
>> $error = FALSE;
>>
>> if (isset($_POST['client_password']) &&
isset($_POST['client_name'])) {
>> if (($_POST['client_password'] == 'blah') &&
($_POST['client_name']
>> == 'blahblah')) {
>> header("Location=
http://idisk.mac.com/companyname-Public");
>
> header("Location:
http://idisk.mac.com/companyname-Public");
>
> See the difference?
>
> What if the user directly accesses the above URL without
entering any
> password? How does the target site check that the
request is authorized?
>
> Micha