Redirecting back after login in PHP

Solution:

Just try to give some example here:

originating_page.php

if(!is_admin) {
    $_SESSION["originatingpage"] = $_SERVER["HTTP_HOST"].$_SERVER["REQUEST_URI"];
    header('Location: http://'.$_SERVER["HTTP_HOST"].'/login.php');
  }
}
Copy code

login.php

if(is_admin_success_login) {
  if (isset($_SESSION["originatingpage"])) {
    $originatingpage = $_SESSION["originatingpage"];
    unset($_SESSION["originatingpage"]);
    header('Location: http://'.$originatingpage);
  } else {
    //do another default action
  } 
}
Copy code

Solution:

Store the URL of the page the person was trying to access before redirecting to login.php. You can store it in a session variable or in the URL. Then your login.php page will know where to send the user after they're logged in.

For example, at the page requiring login:

session_start();
$_SESSION['came_from'] = $_SERVER['REQUEST_URI'];
header("Location: login.php");
Copy code

And in login.php, after the user has been logged in:

session_start();
header("Location: http://" . $_SERVER['HTTP_HOST'] . $_SESSION['came_from']);
Copy code

Solution:

your login page can have a hidden input:

<input type="hidden" name="redirect_to" value="<?php echo $_SERVER['HTTP_REFERER']; ?>" />
Copy code

Or in the "originating page, you can pass the current REQUEST_URI as a get variable, which in turn goes in to that same form element. Then when they submit the form you check for$_REQUEST['redirect_to'] and pass it off with aheader().

...
if (logged in && redirect to is filled in){
  header('Location: '.$_REQUEST['redirect_to']);
}
...
Copy code

Above is pseudo-code, btw