Question

I have built a site that when a user fills in a form correctly he is redirected to a confirmation page that has the url mySite.com\A\confirmation.

I want to be able to redirect the user to a different page If he enters that url “mySite.com\A\confirmation” himself

What is the best way of achieving this (i was hoping something more elegant then keeping state of each user)

Answer 1

Possible simple solutions:

1. Store some key in cookie, verify it on confirmation page and clear.
   Cookie value should be encrypted, so user won’t be able to forge it
   (if not, you can use Crypto.encryptAES(String),
   Crypto.decryptAES(String) manually.
2. Change confirmation controller
   to accept parameter, pass that parameter from form submit
   controller: confirmation(secureParameter); Validate parameter in
   confirmation method.
3. Do POST request to confirmation from your code and change routes and redirect on GET requests
4. Instead of redirect to confirmation in your controller, simply render confirmation template directly, this way there would be no confirmation URL.