Disabling a controller page from being viewed

Question

I am an absolute newbie in the world of Yii and MVC. My question is : Say if I have made a CRUD of some model and I have modified the "_form.php" partial to be used from some place else, for example a comment form which is used from the "post" view, and for example if my link for the creation of comment is :

http://localhost/example/comment/create

How do I stop this page from being accessed and only be called from the view of the "posts" page only?

Would I have to use RBAC for this? Is there any other method? Using "GET" methods maybe?

Answer 1

You can try checking if the referrer page is the one you want, using getUrlReferrer() or the magic property urlReferrer:

http://www.yiiframework.com/doc/api/1.1/CHttpRequest#getUrlReferrer-detail

e.g.:

if(preg_match('/post\/view/', Yii::app()->request->urlReferrer) === 1) {
    // do something
}

Place this in your comment/create action.