then change line 20 from

header (“Location: http://www.blabla.com/blabla.php“);
to
header ('Location: http://www.blabla.com/blabla.php');

its symple syntax error

i also got rid of

exit;

on line 21 and changed to to

else
header ('Location: http://www.blabla.com/blabla.php');

here is the full code

<?php // thankyou.php
function cbValid($rcpt, $time, $item, $cbpop){
$key=’key’;
$xxpop=sha1($key|$rcpt|$time|$item);
$xxpop=strtoupper(substr($xxpop,0,8));
if ($cbpop==$xxpop){
return 1;
} else {
return 0;
}
}
// ===== Sanitize the input (only allow GET for security) =====
$rcpt = trim(addslashes($_GET['cbreceipt']));
$time = trim(addslashes($_GET['time']));
$item = trim(addslashes($_GET['item']));
$cbpop = trim(addslashes($_GET['cbpop']));
// ===== Redirect if invalid and exit =====
if (!cbValid($rcpt, $time, $item, $cbpop)) {
// redirect
header ('Location: http://www.blabla.com/blabla.php');
else
header ('Location: http://www.blablacom/blabla.php');
}
// no need to do an ELSE because the exit will terminate further processing
// if a valid transaction is not confirmed
// now have the thank you page html
?>

This is the exact error I’ve encountered.

Parse error: syntax error, unexpected T_VARIABLE in /home/****/public_html/**********/*******443isdbxksncyromwgdx/index.php on line 4

(I replaced my domain folders to asterisk for security purposes)

Thanks!

I would never say never, I guess anything is possible, but it’s not as easy as you might think… and it’s certainly more secure than using nothing at all.

PHP is server-side.
HTML is client-side.

This code is PHP, which means – it is -not- displayed to the user.