PHP - Change Url Using Window.history.pushstate

Dear fourm, i am wondering if anyone can shed some light on this form submission problem with back/forward buttons.

long story short: i used to make a form, then submit to a form process php file. errors were difficult to deal with. Thus, many people tell me to submit to the same page. I now submit to the same page.

my homepage has a login button. i use a csrf token in a hidden input matched with a session variable. i decided to submit to same page and handle the submit like so:

if server request-method = post and isset input name and isset session token then check the token with hash_equals

if everything matches then show the login page.

i don't have a problem with the form and the form submission processing. everything i fine.

now when i use the browser refresh button on the login page, i am sent back to the homepage. all is good.

when i press the back button, i go back to the homepage again. super.

then i press the forward button in the browser and i get a not connected error.

the back button now also shows this error.

i tinkered around a bit and added crazy ideas and it worked one time with unset($_POST) as an else to the if mentioned above.

the idea is that if server request-method is post without an else. the page is listed below for any get request to process.

i assume that the browser is trying to repost data is empty but my if statement should kick it out to the get code, right?

what i want is to unset the csrf token and the matching session token for security purposes. i suppose that this breaks the back/forward buttons?

how can i get the browser to show the homepage regardless of the post situation? there must be a logical answer. something in my code is breaking this an preventing the browser from simply loading the home page

any help is greatly appreciated! Thank you.

Like many parents, I'm challenged with keeping my kids from browsing the evil parts of the internet. My son is 11 and my wife caught him deleting IE history the other day. The computer he uses is a Windows 8.1 laptop, and it is not Pro. How can i let him use internet explorer on his own user but keep him from tampering with any of the history ( or settings for that matter)?

Is there a better solution? I found some internet history logging software online, but I didn't feel comfortable with the source, and fear it may contain viruses or other malware.

I am trying to create a order history page.

I want it to look something like this:

Ordernumber:  12
Products:
               Product 1
               Product 2
               Product 3
               Product 4
Total:      xx

Ordernumber:  13
Products: 
               Product 5
               Product 6
Total:      xx

and so on.

I have a recordset which get the ordernumbers from my database
and i have another recordset which get the products (this recordset has a WHERE clause which is used to get the products associated with its ordernumber.

Code: [Select]
    mysql_select_db($database_lol, $lol);
    $query_ono = "SELECT DISTINCT ordre.ono FROM ordre WHERE ordre.bruker='{$_SESSION['MM_Username']}'";
    $ono = mysql_query($query_ono, $lol) or die(mysql_error());
    $row_ono = mysql_fetch_assoc($ono);
    $totalRows_ono = mysql_num_rows($ono);
   
    mysql_select_db($database_lol, $lol);
    $query_history = "SELECT ordre.vare FROM ordre WHERE ordre.ono='{$row_ono['ono']}'";
    $history = mysql_query($query_history, $lol) or die(mysql_error());
    $row_history = mysql_fetch_assoc($history);
    $totalRows_history = mysql_num_rows($history);

This is the recordsets.

this is my table:

+-------+---------------------+------+
| ID      | vare                   | ono  |
+-------+---------------------+------+
|       1 | Product 1           |   12 |
|       2 | Product 2           |   12 |
|       3 | Product 3           |   12 |
|       4 | Product 4           |   12 |
|       5 | Product 5           |   13 |
|       6 | Product 6           |   13 |
+-------+---------------------+------+


So my question is: How do i do this? list all the records i mean.
Thanks

Hello everyone,
I am having a problem since some time now and need some help.
I have created a login page where the user has to input a username and password to login.
The username will be put in a session and when the user logs out the session data and session itself gets destroyed.
However when I go back in the browser history to the page where I logged in I get the "famous" resend information dialog that asks you to resend the information from the login form. Which means that all the post data gets resend and the user logs in again without having to put in a username and password.

Here is my code:
Login.tpl:
Code: [Select]
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
    <head>
       
        <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
        <title>Snitch</title>
        <link rel="stylesheet" type="text/css" href="templates/css/snitch1440x900.css" />
    </head>
    <body>
    <div id="login-achtergrond">
        <div id="login">
            <form action="." id="loginform" name="login"  method="post">
            <input type="hidden" name="actie" value="Login"></input>
            <input type="text" id="username" name="username" value="" style="opacity:0.7;filter:alpha(opacity=70)"></input>
            <input type="password" id="password" name="password" value="" style="opacity:0.7;filter:alpha(opacity=70)"></input>
            <input id="aanmelden" type="submit" name="submit" value="" style="opacity:0;filter:alpha(opacity=0)">
            </form>
        </div>
        <div id="registreer">
        </div>
    </div>
    </body>   
</html>
   
Here is the code of my login page (I created this in a OOP way):
Code: [Select]
<?php
  class Handler_Login extends Actie_Handler
  {
      function __construct($actie_handle)
      {
        parent::construct($actie_handle);
        $this->actie = $actie_handle;
      }
       function secured_handler()
       {
           if ($this->session->check_session() == false)
           {
                  $password = $_POST['password'];
                  $username = $_POST['username'];
                  $login = $this->dbh->Login($username, $password);
                  if ($login == true)
                  {
                      $this->session->set('username', $username);
                      $this->view->displayHome();
                      $this->view->display(); 
                  }
                  else
                  {
                      echo "You are not logged in!";
                  }
                  unset($_POST['password']);
                  unset($_POST['username']);
               
           }
           if ($this->session->check_session() == true)
           {
               $this->view->displayHome();
               $this->view->display();
           }
       }
  }
?>
Here is the code of my logout:
Code: [Select]
<?php
    class Handler_Loguit extends Actie_Handler
  {
      function __construct($actie_handle)
      {
        parent::construct($actie_handle);
        $this->actie = $actie_handle;
      }
       function secured_handler()
       {
           $this->session->stopSession();
           $this->view->displayLogin();
           $this->view->display();
       }
  }
?>
Here is the code of my session:
Code: [Select]
<?php
    class Session
    {
         function __construct()
         {
             if(!isset($_SESSION))
             {
                session_start();
             } 
         }
         function set($name, $value)
         {
             $_SESSION[$name] = $value;
         }
         
         function get($name)
         {
             return $_SESSION[$name];
         }
    
         function stopSession()
         {
             $_SESSION = array();
             //even though I don't use any cookies someone told me that I had to remove the cookie of the session to completely destroy it?
             //please tell me if this is correct  
             if (isset($_COOKIE[session_name()])) 
             { 
                setcookie(session_name(), '', time()-42000, '/'); 
             }            
             session_destroy(); 
         }
         
         function session_message($naam)
         {
            return print_r($_SESSION[$naam]); 
         }
         
         
         function check_session()
         {
             if(isset($_SESSION['username']) && !empty($_SESSION['username'])) 
             { 
                return true;
             }
             else
             {
                return false;
             }         
        }
    }
?>
this is the code of my view for those who might be interested:
Code: [Select]
<?php
      class view_manager
      {
        private $tpl;
        function __construct()
        {
             
        }
        
        function displayStatus()
        {
            $status = file_get_contents("templates/status.tpl");
            $this->tpl = str_replace("%content%", $status, $this->tpl);
        }
        
        function displayLogin()
        {
            $this->tpl = file_get_contents("templates/login.tpl");
        }
        
        function displayHome()
        {
            $this->tpl = file_get_contents("templates/home.tpl");
        }
        
        function display()
        {   
            echo $this->tpl;
        }
      }
?>
using a header to redirect to the login page is not going to work since I use my view_manager to display the pages.
Does anyone know of any solution to get rid of that stupid resend information dialog without using a header? I tryed unsetting the values of POST in my login code but that did not seem to work. Please help me out I've been looking for an answer for over 1 and a half week so far

Is there anyone who knows how to remove the POST data from a form when the user goes back in browser history?
If it's not possible, is there any solution except using a header?

Scenario :   I would like to open the main program window and at the same time, if a condition is met, open a second - popup window to alert the user of previous information stored in the database.   This is an easy exercise if I use a hyperlink to open th second (popup) window but this is not the process required .   Can someone point me in the right direction ?   Cheers and thanks

I'm wondering what makes a pop-up login window run differently than inside a webpage.

I can't seem to get my login system to bring the user back to the page (brings them to a page can't be found) when clicking a form submit button when it is included in the webpage.

But if your in the popup page that I'm trying to include, it works no problem so I was wondering if it changes anything. Or if there is some sort of work around (such as embedding a popup window into the webpage).

Thanks a lot!

I've been looking for one all over the internet and have yet to find one to my exact specifications. I don't even know how I would attempt to make said script since I don't have a database of my own with that type of information stored on it. I basically want to use History.com's This Day In History feed on my website, but I don't like their RSS feed considering it's a giant paragraph of a single article. I'm just looking to post a few random dates and some information like this for example:

1986 > blah blah blah
1990 > blah blah blah
2010 > blah blah blah

Any help would be greatly appreciated brethren.

Hi Chaps,

Fully aware that this is not strictly a PHP based query, but I am hving problems with PHP / File Uploads to a FTP site.

Basically, I have a PHP app that requires login, the login credentials determine which FTP folder to read on sucessful login. The user can then browse the FTP folder, upload and download files. The user cannot access/view any FTP folders other than their specific folder.

I'm looking into alternatives to PHP/PHP_FTP file uploads, as using Form POSTs or Java has caused problems for some, but not for others.

My question is: is there any controls that can open a MS-style Explorer FTP Window, outside of the app (i.e. in a pop-out exporer window) that can restricted a user to a certain folder level e.g.:
Quote

FTP-Root

 - Freelance

  - User-A
    - Folder-1
    - Folder-2
      - Folder-3

  - User-B
    - Folder-1

This would mean that when User A logs in, his default FTP Window/access would be User-A, and would be able to browse down to Folder-3, but could not see User-B, Freelance or FTP-Root folders.

Again, sorry if this is misplaced.

Hii....

I simply want to know the answer of a simple question "Is it possible to do Window Programming in PHP?", like C++, .net, etc.....and if so then where I can find links for the tutorials.....

Trying to get popup window to work in php.  Keep getting template parse errors.  Here's the code I've been using in HTML:

Code: [Select]
echo '
<a onClick="window.open('annexplayerpop.shtm','popup','height=275,width=425,top=130,left=280,scrollbars=no')" target="popup"><img src="popupbutton-blue-bg.png" title="Popup MP3 Player" border="0" height="45" width="58"></a>
';

I would like to open a new IE window. But, failed to do that. Is there any wrong with my statements?

Code: [Select]
<?php
$url='http://www.google.com';
$browser = new COM("InternetExplorer.Application");
$browser->Visible = true;
$browser->Navigate($url);
?>

Can anyone help me with this pls?

Thank you.

Regards,
juzz

hi there

i have a basic image gallery. it displays smaller thumbnails in a folder and when you click on them it displays a larger image.

how can i make the larger image open in a seperate window of 640x480 when the thumbnail is clicked?

thanks

here is the code:

<?php
include('connect.php');

$images = "images/"; # Location of small versions
$big    = "big/"; # Location of big versions (assumed to be a subdir of above)
$cols   = 4; # Number of columns to display

if ($handle = opendir($images)) {
   while (false !== ($file = readdir($handle))) {
       if ($file != "." && $file != ".." && $file != rtrim($big,"/")) {
           $files[] = $file;
       }
   }
   closedir($handle);
}

$colCtr = 0;
echo '<table width="50%" cellspacing="3" align=center ><tr>';
foreach($files as $file)
{
  if($colCtr %$cols == 0)
    echo '</tr><tr><td colspan="10" ></td></tr><tr>';
  echo '<td ><a href="' . $images . $big . $file . '" ><img src="' . $images . $file . '" /></a></td>';
  $colCtr++;
}
echo '</table>' . "\r\n";
?>

 

I have a page that will sort my DB table by name and telephone number.  And it has a button.  I want visitors to be able to input a last name, and have the telephone number provided in a SEPERATE and NEW window after they click the button.

Any suggestions for best procedure?

My two initial concepts a
1- Make this a form, with the "action" leading to a file like
SELECT *FROM myTable WHERE last name="$inputname"
 and have then use Javascript ONSUBMIT to open a NEW window.
(not sure it will succeed as I desire)

2- Make this a simple BUTTON with Javascript pointing everything to the file to process the quiery.

PS: I've heard IE doesn't always handle "_BLANK" properly, and I'm unaware of a PHP method.

Haven't thought it through entirely, so I'm looking for pointers and advise.