php header location self 跳转到自己 php refresh current page? 有大用

星期六, 2016-04-09 14:46 — shiping1

正确答案 
 header('Location: '.$_SERVER['REQUEST_URI']);

answered Nov 19 '10 at 0:42

Byron Whitlock

33.9k1984136

Shouldn't that be sanitized? – Alex Feb 21 '12 at 19:07

$_SERVER['REQUEST_URI'] is a server generated variable. Only GET,POST,a and COOKIES are susceptible to user interference. (with the possible exception of headers like "Referrer") – Byron Whitlock Feb 21 '12 at 19:38

Those server generated variables can be modified, so you should still consider sanitizing them. – Nicholas Pickering Aug 14 '13 at 14:18

Those who argue it should be sanitized don't really understand what they are talking about. REQUEST_URI holds the URL where you currently are, so if there's any security issue with going to this URL, the harm is already done. Redirecting to where you already are has no security implication. – this.lau_ Oct 30 '14 at 17:12

@RobertM. nope, it is redirecting you to the current url. As already said, the damage would already be done.– Hanoncs Oct 1 '15 at 17:59

来自 http://stackoverflow.com/questions/4221116/php-refresh-current-page

普通分类:

php

You are here

友情链接

搜索表单

用户登录

You are here

php header location self 跳转到自己 php refresh current page? 有大用

友情链接