Do not rely on an HTTP link, which is a valid or even non-empty field. People can refuse this set, leaving any checks that this variable goes to the empty side of the IF-ELSE clause.
You can protect yourself from this by sending a parameter in the URL or POST parameters, which will contain a value that you can use to redirect the user.
random
source share