如何使用JS或PHP将Referrer从着陆页传递至主页面？

Absolutely! You can definitely pass the original referrer from your captcha landing page to the main page using either JavaScript or PHP. Here are two reliable approaches, depending on whether you prefer frontend handling or backend control:

This method uses browser storage and URL parameters to carry the referrer through the captcha verification step.

Step 1: Capture & Store Referrer on Landing Page #

On first-page, capture the incoming referrer when the page loads and store it in sessionStorage (persists across the same browser session for your domain):

document.addEventListener('DOMContentLoaded', () => {
  // Grab the incoming referrer
  const incomingReferrer = document.referrer;
  
  // Store it if it exists
  if (incomingReferrer) {
    sessionStorage.setItem('originalReferrer', incomingReferrer);
  }

  // Attach click handler to your captcha submit button
  const submitBtn = document.getElementById('captcha-submit');
  submitBtn.addEventListener('click', (e) => {
    e.preventDefault();
    
    // Replace this with your actual captcha validation logic
    if (isCaptchaValid()) {
      const storedReferrer = sessionStorage.getItem('originalReferrer');
      let redirectUrl = 'http://example.com/second-page';
      
      // Add referrer as a query parameter (optional, but explicit)
      if (storedReferrer) {
        redirectUrl += `?referrer=${encodeURIComponent(storedReferrer)}`;
      }
      
      // Redirect to main page
      window.location.href = redirectUrl;
    } else {
      alert('Please complete the captcha correctly!');
    }
  });
});

Step 2: Retrieve Referrer on Main Page #

On second-page, fetch the referrer either from the URL query parameter or from sessionStorage:

document.addEventListener('DOMContentLoaded', () => {
  // Option 1: Get from query parameter
  const urlParams = new URLSearchParams(window.location.search);
  const referrerFromQuery = urlParams.get('referrer');
  
  // Option 2: Fallback to sessionStorage
  const referrerFromStorage = sessionStorage.getItem('originalReferrer');

  // Use the referrer (handle empty case)
  const referrer = referrerFromQuery || referrerFromStorage || 'No referrer detected';
  console.log('Original Referrer:', referrer);
  
  // Clean up storage if no longer needed
  sessionStorage.removeItem('originalReferrer');
});

This is more secure if you want to handle captcha validation server-side (always recommended to avoid frontend tampering).

Step 1: Capture Referrer & Handle Captcha on Landing Page #

On first-page.php, start a session, capture the referrer, and process the captcha submission:

<?php
session_start();

// Store the incoming referrer when the page loads
if (!empty($_SERVER['HTTP_REFERER'])) {
  $_SESSION['original_referrer'] = $_SERVER['HTTP_REFERER'];
}

$error = '';
// Process captcha submission
if ($_SERVER['REQUEST_METHOD'] === 'POST') {
  // Replace with your actual captcha validation (e.g., reCAPTCHA verify)
  $captchaResponse = $_POST['captcha_response'] ?? '';
  $isCaptchaValid = validateCaptcha($captchaResponse);

  if ($isCaptchaValid) {
    $referrer = $_SESSION['original_referrer'] ?? '';
    $redirectUrl = 'http://example.com/second-page.php';
    
    // Append referrer to URL if available
    if (!empty($referrer)) {
      $redirectUrl .= '?referrer=' . urlencode($referrer);
    }
    
    // Redirect to main page
    header("Location: $redirectUrl");
    exit;
  } else {
    $error = 'Invalid captcha, please try again.';
  }
}
?>

<!-- Your captcha form HTML -->
<form method="POST">
  <!-- Add your captcha widget (e.g., reCAPTCHA) here -->
  <div class="captcha">...</div>
  <button type="submit">Verify & Continue</button>
  <?php if ($error): ?>
    <p style="color: red;"><?= htmlspecialchars($error) ?></p>
  <?php endif; ?>
</form>

Step 2: Retrieve Referrer on Main Page #

On second-page.php, access the referrer from the URL parameter or session:

<?php
session_start();

// Get referrer from query parameter or session
$referrer = '';
if (isset($_GET['referrer'])) {
  $referrer = urldecode($_GET['referrer']);
} elseif (isset($_SESSION['original_referrer'])) {
  $referrer = $_SESSION['original_referrer'];
  // Clean up session variable
  unset($_SESSION['original_referrer']);
} else {
  $referrer = 'No referrer detected';
}

// Use the referrer (e.g., log to database, display, etc.)
echo "Original Referrer: " . htmlspecialchars($referrer);
?>

Key Notes #

• Both approaches rely on same-domain hosting (both pages on example.com) since session storage and PHP sessions are domain-bound.
• document.referrer and $_SERVER['HTTP_REFERER'] can be empty (e.g., user directly types the URL, or browser privacy settings block referrers)—always handle empty values.
• When passing referrers via URL parameters, always encode them (encodeURIComponent/urlencode) to avoid issues with special characters.
• For captcha security, server-side validation (PHP) is preferred—frontend JS validation can be bypassed by malicious users.

内容的提问来源于stack exchange，提问作者Neela Kanta