php - Deny direct access to success url in ecommerce website by typing it -

-

bottom line: how prevent direct access success page when transaction done (filename thankyou.php) if he/she knows url. have integrated ccavenue payment gateway in application.

full detail: have made ecommerce web application (still under construction).

on checkout page, whenever user clicks proceed payment button, generating unique ordercode , saving in session , calling session value in success url page , inserting details in order table , if ordercode not set, heading user away //www.example.com/store/

now, suppose knows success url (//www.example.com/store/thankyou.php) ccavenue redirecting after successful payment of amount merchant, types url directly. want user should not directly access typing in url bar, when payment done, thankyou.php file has shown 2 minutes , not more that. , after 2 minutes, if tries access success url page again, should not see success page again.

after bit of research, many of them have said use $_server['http_referer'] knowledge can bypassed if user tries do.

so how achieve ?

any highly appreciated. thank you.

after successful payment, ccavenue redirect our successurl details post url/get url.

whet need on top of thankyou.php page unique value return parameters,

in if block check set parameter , delivery address against particular customer not find in database display thankyou message , save delivery address of customer.

in else block redirect other page customer if hit again same url of thankyou page he/she cannot see page instead take redirected page.


Comments

Post a Comment

Popular posts from this blog

node.js - Mongoose: Cast to ObjectId failed for value on newly created object after setting the value -

-
this question has answer here: what's mongoose error cast objectid failed value xxx @ path “_id”? 7 answers even though has been asked many times because entity has no valid objectid field. i came across situation objectid set value can casted objectid still error. the schema: var serviceschema = parammongoose.schema({ servicename:{ type: parammongoose.schema.types.objectid , ref: 'servicenames',required:true } }); pseudo code: servicefromdb=new service({servicename:'some name'}); servicefromdb.servicename='000000000000000000000001'; servicefromdb.save(function(paramerror,paramdata){ if(paramerror){ console.log('but but...',servicefromdb,paramerror) } }); the output of code is: but but... { servicename: 000000000000000000000001, _id: 55079a90286f49280364f78b } { [casterror: cast objectid faile...
Read more

how does one get csharp-sqlite to throw exceptions for duplicates or foreign key constraint violations -

-
i making use of csharp-sqlite. in sqlite database have uniqueness , foreign key constraints. when write "duplicate" table exception not raised , way found check exception use following: var error = sqlitecommand.getlasterror(); i hoping able following: var sqlstring = "some insert sql"; var command = sqlitecommand(sqlstring); command.parameters.add(... parameter...); using (var sqlconnection = new sqliteconnection(connectionstring)) { try { command.executenonquery(); } catch (exception ex) { exception } { sqlconnection.close(); } } the "catch" block never hit, though var error = sqlitecommand.getlasterror(); does return description of error expecting. have idea how solve this, or standard practice using csharp-sqlite library?
Read more

Simple Angular 2 project fails 'Unexpected reserved word' -

-
i trying create simple angular2 project based on ng2do project. using quickstart , have following code... <script src="js/quickstart/dist/es6-shim.js"></script> .... import {component, template, bootstrap, foreach} 'js/quickstart/angular2/angular2'; this gives me following error... uncaught syntaxerror: unexpected reserved word what missing? don't know if helps have been having issues day realised because starting code script reference <script src="app.js"> </script> instead of using <script> system.import('app'); </script> hope helps using in tsconfig { "version": "1.5.0-beta", "compileroptions": { "target": "es6", "module": "amd", "declaration": false, "noimplicitany": false, "removecomments": true, "nolib": fal...
Read more