Question

How would I check if the user did not come from the same website? So for example if a user types in the URL in the browser to a direct page then they would have accessed that page without coming from another page in the site.

So something like:

if(!user not from same url)
{
//do some stuff
}

Answer 1

$referer = env('HTTP_REFERER');

if(empty($referer) && $this->Session->check('Auth.redirect') == false)
{
    echo 'user didn\'t come website and wasn\'t redirect from the auth component';
}