Stop Php Execute in page

Question

I have added This Code in My Domain2 where i want this code to be executed Running If it From domain 1

 <?php if(isset($_GET['id2'])) { $id2=$_GET['id2']; echo "www.xxxxxxxxxx"" ></iframe>";}
                                                    else
{
echo "Not Found";

}

I try this code but not working If anyone direct accesses this https://Domain2.com/xxxxxxxx/?id=xxxx Hidden part of is showing How to make hidden if it not Redirected By https://Domain1.com/away.php

You can check `$_SERVER['HTTP_REFERER']` but it's not guaranteed to be set or accurate and then `exit`. — AbraCadaver, Nov 03 '20 at 02:49
You want to check if it was redirected from domain1 by using `id` or something else? — AbraCadaver, Nov 03 '20 at 02:50

cabrillosa · Accepted Answer · 2020-11-03T03:35:35.513

1

You can use $_SERVER['HTTP_REFERER'] to make sure that the refering page (previous page) was the one that you expect:

<?php 
// if the request comes from a file that contains the string "conforming.php" then render the page
    if(stristr($_SERVER['HTTP_REFERER'], "conforming.php")) {
         //serve page if came from conforming.php
     }
// if the referring page is not conforming.php, then redirect the user to the conforming version
    else  {
        header("Location: conforming.php");
    }
?>

additional information: https://www.w3.org/TR/WCAG20-TECHS/SVR3.html

EDIT** I customized the code below according to your additional requirements:

<?php 

if (stristr($_SERVER['HTTP_REFERER'], "https://Domain1.com/away.php"))
{
    if (isset($_GET['id2']))
    {
        $id2 = $_GET['id2'];
        echo "<iframe frameborder=\"0\" scrolling=\"no\" width=\"560\" height=\"320\" src=\"https://www.xxxxxxxxxx.com/files.php?v=$id2\" allowfullscreen=\"true\" webkitallowfullscreen=\"true\" mozallowfullscreen=\"true\" ></iframe>";
    } else{
        echo "id is empty";
    }
    
}
else
{
    //invalid referer! go back to domain1 to make it valid!
    header("Location: https://Domain2.com/xxxxxxxx/");
}

?>

edited Nov 03 '20 at 03:35

answered Nov 03 '20 at 02:50

cabrillosa

155
8

I try this Direct url executed ";} else { echo "Stop"; } if(stristr($_SERVER['HTTP_REFERER'], "https://xxxxxxxxx.com/away.php")) { //serve page if came from conforming.php } else { header("Location: xxxxxxxxx"); } ?> – Bharat Sharma Nov 03 '20 at 03:11
You can check first $_SERVER['HTTP_REFERER'] before processing the iframes. – cabrillosa Nov 03 '20 at 03:22
Thank you for helping me out. I edit the question can you please check and fix my code – Bharat Sharma Nov 03 '20 at 03:28
good to hear that! – cabrillosa Nov 03 '20 at 03:35
Just beware that it's easy to spoof a referer value, so it only provides very minimal security – ADyson Nov 03 '20 at 08:08

score 0 · Answer 2 · answered Nov 03 '20 at 02:49

0

What you are looking for is exit;

<?php 

if(isset($_GET['id'])) 
{ 
  $id1=$_GET['id']; echo "xxxxxxxxxx=$id1";}
else {
  echo "stop";
  exit;
}

?>

Exit will terminate the execution of the current script. This will then continue with the execution processes, which will call your next function.

More reading here: https://www.php.net/manual/en/function.exit.php

answered Nov 03 '20 at 02:49

Sweet Chilly Philly

3,014
2
27
37

if the id= nothing in URL it shows word stop – Bharat Sharma Nov 03 '20 at 03:00
Yup thats perfect. its doing what you wrote now. Its echo'd stop and then exited out of the script. your code is working perfect. id is not set to anything in your 'else' and its only getting in there if id is not set. – Sweet Chilly Philly Nov 03 '20 at 03:02

Stop Php Execute in page

2 Answers2