Jquery - Clear or Remove the URL parameters

Question

Regards, I'm doing a password recovery system in PHP, MySQL and AJAX, the system generates a link with an encrypted code and sends it to the user's mail.

Example of generated encrypted link:

$link = www.dominio.com/reset/?code=98rudrm2093xda

The user has to open the link from your email, to confirm the request, the site detects the code of the URL, using PHP and AJAX desencrita and compares it with the code for the database, if it exists then it creates a new password, this is all done in AJAX, but there is something, if the user returns to reload the web, you are receiving an alert that the code does not exist in the database.

Question:

As I can erase the code of the URL with jQuery, then reset the password, to prevent the alert window appears if I refresh the web page.

Is this possible?

I appreciate your help very much!

you should change that code after user change his password .. so if user reload the page he will no longer get the same code exists in database — Mohamed-Yousef, Dec 24 '15 at 03:27
Why don't you set a flag in database once the user successfully changes the password or after your link expires after certain period of time so that you can display relevant error message? — Guruprasad J Rao, Dec 24 '15 at 03:28
Why can't you simply redirect back to the homepage to "reset" the URL? — Jonathan Lam, Dec 24 '15 at 03:28
[ Mohamed ], thank for you help. It's working well, what I want is to eliminate the parameters of the URL — Learning and sharing, Dec 24 '15 at 03:28
Wouldn't something server side be more appropriate. I don't know if editing the url would be the most reliable. — Antonio Manente, Dec 24 '15 at 03:28
[ Jonathan ] The system is working in AJAX want everything to work well! — Learning and sharing, Dec 24 '15 at 03:31
Possible duplicate of [Modify the URL without reloading the page](http://stackoverflow.com/questions/824349/modify-the-url-without-reloading-the-page) — Jonathan Lam, Dec 24 '15 at 03:38
@JonathanLam its not about modify the URL .. In this case the url had a confirm link in user email so he still can click it and redirect him to the page — Mohamed-Yousef, Dec 24 '15 at 03:41

score 3 · Accepted Answer · answered Dec 24 '15 at 03:32

3

What I'm understanding from your question is that you want a method to set up the password reset and not allow re-resetting.

Send email with coded link
Have user click the link and visit the page
Page will get the code GET parameter (PHP or JS)
Do some magic to check if code exists in database (PHP)
If code exists, then allow password reset and delete code from database (PHP)
If not, show error message (PHP)
Redirect to index.html or index.php afterwards (JS)

The last step is to remove the URL variables. If the user checks that same URL again, it will go from step 3 on. Step 4 should stop a re-reset of the password.

answered Dec 24 '15 at 03:32

Jonathan Lam

16,831
17
68
94

As @Lionel Richie said I wonder if it is possible to remove, update a browser or delete URL without refreshing the web page. – Learning and sharing Dec 24 '15 at 03:36
@Learningandsharing Oh, okay. (Also, tag a user by prepending with an `@`, not using the `[ square brackets ]` like the tags for a question) – Jonathan Lam Dec 24 '15 at 03:37
@Learningandsharing If that's the case, look at [this question](http://stackoverflow.com/questions/824349/modify-the-url-without-reloading-the-page) and its answers. I think it's what you're looking for. – Jonathan Lam Dec 24 '15 at 03:38

score 1 · Answer 2 · answered Dec 24 '15 at 03:31

You could use this which would technically refresh the page.

window.location.href = window.location.href.split('?')[0];

If you didn't want to refresh or redirect you could use this .pushState() which will update your browser history and change the URL on the page. This would prevent refresh, but hitting the back button on your browser would trigger the refresh again.

EXAMPLE: history.pushState('/some-url');

You could also explore the other HTML5 history API methods like history.replaceState()

However, none of this is probably best practice - I would think your best bet would be to let the querystring remain intact, but only trigger the Alert box / reset on the AJAX return if a password is set correctly.

In other words, have your reset handler return a readable response returning proper headers (eg 200 for success, 4xx for fail, etc), and adjust your $.ajax() call to something more like:

$.ajax({
    url: your_url,
    data: your_data,
    type: 'POST',
    success: function(e) {
        // Password was reset
        // ...show your alert
    },
    error: function(e) {
        // Code wasn't found or reset failed
        // ...do nothing or show an error
    }
});

Jquery - Clear or Remove the URL parameters

2 Answers2