Question

What do I need to put in a php code so that the user cannot access it even if he specified the correct url for the page they are trying to access. And redirect it to the logon page. I’m really having difficulty in this matter, everytime I click back button on the browser the user can still access the page

Answer 1

If you require/include your from within any other php file like an index.php, then, you can define a constant which will be checked against in your required file.

index.php:

define(APP_LOADED, true);

required_file.php:

if ( !defined(APP_LOADED) ) {
    header('Location: login.php');
    exit 0;
}
// do something else here