<p>Currently, we're storing the user's HTTP_REFERER so we can redirect the user back to the previous page they were browsing before they logged in.</p>

<p>Http Referer comes from the client and can be spoofed or blank. Is there a more secure/reliable method to deliver this handy user redirect?</p>

somehow running
```
```
history.go(-1);
```
```
is the only alternative i can think of (javascript)